CVE-2019-13555

🗓️ 13 Nov 2019 22:27:22Reported by icscertType

Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series devices are vulnerable to remote denial-of-service attacks via FTP service

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-13555	13 Feb 202414:41	–	circl
CNVD	Mitsubishi Electric MELSEC-Q Series and Mitsubishi MELSEC-L Series Resource Management Error Vulnerability	11 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-13555	13 Nov 201922:27	–	cvelist
EUVD	EUVD-2019-5010	7 Oct 202500:30	–	euvd
ICS	Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules	7 Nov 201900:00	–	ics
NVD	CVE-2019-13555	13 Nov 201923:15	–	nvd
Tenable Nessus	Mitsubishielectric Q03\/04\/06\/13\/26udvcpu Uncontrolled Resource Consumption	27 May 202000:00	–	nessus
Tenable Nessus	Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules Uncontrolled Resource Consumption (CVE-2019-13555)	7 Feb 202200:00	–	nessus
Prion	Race condition	13 Nov 201923:15	–	prion
RedhatCVE	CVE-2019-13555	22 May 202508:05	–	redhatcve

NVD

Vulners

Node

mitsubishielectric q03/04/06/13/26udvcpu_firmwareRange≤21081

AND

mitsubishielectric q03/04/06/13/26udvcpuMatch-

Node

mitsubishielectric q04/06/13/26udpvcpu_firmwareRange≤21081

AND

mitsubishielectric q04/06/13/26udpvcpuMatch-

Node

mitsubishielectric q03udecpu_firmwareRange≤21081

AND

mitsubishielectric q03udecpuMatch-

Node

mitsubishielectric q04/06/10/13/20/26/50/100udehcpu_firmwareRange≤21081

AND

mitsubishielectric q04/06/10/13/20/26/50/100udehcpuMatch-

Node

mitsubishielectric l02/06/26cpu_firmwareRange≤21101

AND

mitsubishielectric l02/06/26cpuMatch-

Node

mitsubishielectric l26cpu-bt_firmwareRange≤21101

AND

mitsubishielectric l26cpu-btMatch-

Node

mitsubishielectric l02/06/26cpu-p_firmwareRange≤21101

AND

mitsubishielectric l02/06/26cpu-pMatch-

Node

mitsubishielectric l26cpu-pbt_firmwareRange≤21101

AND

mitsubishielectric l26cpu-pbtMatch-

Node

mitsubishielectric l02/06/26cpu-cm_firmwareRange≤21101

AND

mitsubishielectric l02/06/26cpu-cmMatch-

Node

mitsubishielectric l26cpu-bt-cm_firmwareRange≤21101

AND

mitsubishielectric l26cpu-bt-cmMatch-

[
  {
    "product": "Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior."
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-19-311-01

21 Nov 2024 04:25Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

CVSS 3.15.9

EPSS0.0051

CWE-400