CVE-2019-13555
Description
In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric q03udecpu_firmware | v ≤ 21081 | — |
| mitsubishielectric q03\/04\/06\/13\/26udvcpu_firmware | v ≤ 21081 | — |
| mitsubishielectric q04\/06\/13\/26udpvcpu_firmware | v ≤ 21081 | — |
| mitsubishielectric q04\/06\/10\/13\/20\/26\/50\/100udehcpu_firmware | v ≤ 21081 | — |
| mitsubishielectric l02\/06\/26cpu_firmware | v ≤ 21101 | — |
| mitsubishielectric l26cpu-bt_firmware | v ≤ 21101 | — |
| mitsubishielectric l02\/06\/26cpu-p_firmware | v ≤ 21101 | — |
| mitsubishielectric l26cpu-pbt_firmware | v ≤ 21101 | — |
| mitsubishielectric l02\/06\/26cpu-cm_firmware | v ≤ 21101 | — |
| mitsubishielectric l26cpu-bt-cm_firmware | v ≤ 21101 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.