CVE-2020-5668
Description
Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU firmware version '06' and earlier, RJ71EN71 firmware version '47' and earlier, RJ71GF11-T2 firmware version '47' and earlier, RJ72GF15-T2 firmware version '07' and earlier, RJ71GP21-SX firmware version '47' and earlier, RJ71GP21S-SX firmware version '47' and earlier, and RJ71GN11-T2 firmware version '11' and earlier) allows a remote unauthenticated attacker to cause an error in a CPU unit and cause a denial-of-service (DoS) condition in execution of the program and its communication, or to cause a denial-of-service (DoS) condition in communication via the unit by receiving a specially crafted SLMP packet
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric rj71en71_firmware | v ≤ 47 | — |
| mitsubishielectric r00cpu_firmware | v ≤ 19 | — |
| mitsubishielectric r01cpu_firmware | v ≤ 19 | — |
| mitsubishielectric r02cpu_firmware | v ≤ 19 | — |
| mitsubishielectric r04cpu_firmware | v ≤ 51 | — |
| mitsubishielectric r08cpu_firmware | v ≤ 51 | — |
| mitsubishielectric r16cpu_firmware | v ≤ 51 | — |
| mitsubishielectric r32cpu_firmware | v ≤ 51 | — |
| mitsubishielectric r120cpu_firmware | v ≤ 51 | — |
| mitsubishielectric r08sfcpu_firmware | v ≤ 22 | — |
| mitsubishielectric r16sfcpu_firmware | v ≤ 22 | — |
| mitsubishielectric r32sfcpu_firmware | v ≤ 22 | — |
| mitsubishielectric r120sfcpu_firmware | v ≤ 22 | — |
| mitsubishielectric r08pcpu_firmware | v ≤ 25 | — |
| mitsubishielectric r16pcpu_firmware | v ≤ 25 | — |
| mitsubishielectric r32pcpu_firmware | v ≤ 25 | — |
| mitsubishielectric r120pcpu_firmware | v ≤ 25 | — |
| mitsubishielectric r08psfcpu_firmware | v ≤ 06 | — |
| mitsubishielectric r16psfcpu_firmware | v ≤ 06 | — |
| mitsubishielectric r32psfcpu_firmware | v ≤ 06 | — |
| mitsubishielectric r120psfcpu_firmware | v ≤ 06 | — |
| mitsubishielectric rj71gf11-t2_firmware | v ≤ 47 | — |
| mitsubishielectric rj72gf15-t2_firmware | v ≤ 07 | — |
| mitsubishielectric rj71gp21-sx_firmware | v ≤ 47 | — |
| mitsubishielectric rj71gp21s-sx_firmware | v ≤ 47 | — |
| mitsubishielectric rj71c24-r2_firmware | v ≤ 47 | — |
| mitsubishielectric rj71c24-r4_firmware | v ≤ 47 | — |
| mitsubishielectric rj71gn11-t2_firmware | v ≤ 11 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.