CVE-2020-5527
Description
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric cr800-q_firmware | No range specified | — |
| mitsubishielectric fx3g_firmware | No range specified | — |
| mitsubishielectric fx3gc_firmware | No range specified | — |
| mitsubishielectric fx3s_firmware | No range specified | — |
| mitsubishielectric fx3u_firmware | No range specified | — |
| mitsubishielectric fx3uc_firmware | No range specified | — |
| mitsubishielectric fx5u_firmware | No range specified | — |
| mitsubishielectric fx5uc_firmware | No range specified | — |
| mitsubishielectric fx5uj_firmware | No range specified | — |
| mitsubishielectric l02cpu_firmware | No range specified | — |
| mitsubishielectric l02cpu-p_firmware | No range specified | — |
| mitsubishielectric l02scpu_firmware | No range specified | — |
| mitsubishielectric l02scpu-p_firmware | No range specified | — |
| mitsubishielectric l06cpu_firmware | No range specified | — |
| mitsubishielectric l06cpu-p_firmware | No range specified | — |
| mitsubishielectric l26cpu_firmware | No range specified | — |
| mitsubishielectric l26cpu-bt_firmware | No range specified | — |
| mitsubishielectric l26cpu-p_firmware | No range specified | — |
| mitsubishielectric l26cpu-pbt_firmware | No range specified | — |
| mitsubishielectric q02phcpu_firmware | No range specified | — |
| mitsubishielectric q06phcpu_firmware | No range specified | — |
| mitsubishielectric q12dccpu-v_firmware | No range specified | — |
| mitsubishielectric q12phcpu_firmware | No range specified | — |
| mitsubishielectric q12prhcpu_firmware | No range specified | — |
| mitsubishielectric q172dscpu_firmware | No range specified | — |
| mitsubishielectric q173dscpu_firmware | No range specified | — |
| mitsubishielectric q173nccpu_firmware | No range specified | — |
| mitsubishielectric q24dhccpu-ls_firmware | No range specified | — |
| mitsubishielectric q24dhccpu-v_firmware | No range specified | — |
| mitsubishielectric q24dhccpu-vg2_firmware | No range specified | — |
| mitsubishielectric q25phcpu_firmware | No range specified | — |
| mitsubishielectric q25prhcpu_firmware | No range specified | — |
| mitsubishielectric q26dhccpu-ls_firmware | No range specified | — |
| mitsubishielectric r00cpu_firmware | No range specified | — |
| mitsubishielectric r01cpu_firmware | No range specified | — |
| mitsubishielectric r02cpu_firmware | No range specified | — |
| mitsubishielectric r04cpu_firmware | No range specified | — |
| mitsubishielectric r04encpu_firmware | No range specified | — |
| mitsubishielectric r08cpu_firmware | No range specified | — |
| mitsubishielectric r08encpu_firmware | No range specified | — |
| mitsubishielectric r120cpu_firmware | No range specified | — |
| mitsubishielectric r120encpu_firmware | No range specified | — |
| mitsubishielectric r16cpu_firmware | No range specified | — |
| mitsubishielectric r16encpu_firmware | No range specified | — |
| mitsubishielectric r32cpu_firmware | No range specified | — |
| mitsubishielectric r32encpu_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.