Lucene search

[email protected]CVE-2020-16850

HistoryNov 30, 2020 - 10:15 p.m.

CVE-2020-16850

2020-11-3022:15:00

CWE-400

CWE-20

[email protected]

web.nvd.nist.gov

cve-2020-16850

mitsubishi

melsec

iq-r

plcs

firmware

dos

physical access

r04cpu

rj71gf11-t2

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

44.2%

JSON

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

CPENameOperatorVersion
mitsubishielectric:r00cpu_firmwaremitsubishielectric r00cpu firmwarele20
mitsubishielectric:r01cpu_firmwaremitsubishielectric r01cpu firmwarele20
mitsubishielectric:r02cpu_firmwaremitsubishielectric r02cpu firmwarele20
mitsubishielectric:r04cpu_firmwaremitsubishielectric r04cpu firmwarele52
mitsubishielectric:r08cpu_firmwaremitsubishielectric r08cpu firmwarele52
mitsubishielectric:r16cpu_firmwaremitsubishielectric r16cpu firmwarele52
mitsubishielectric:r32cpu_firmwaremitsubishielectric r32cpu firmwarele52
mitsubishielectric:r120cpu_firmwaremitsubishielectric r120cpu firmwarele52
mitsubishielectric:r08sfcpu_firmwaremitsubishielectric r08sfcpu firmwarele22
mitsubishielectric:r16sfcpu_firmwaremitsubishielectric r16sfcpu firmwarele22

CPE	Name	Operator	Version
mitsubishielectric:r00cpu_firmware	mitsubishielectric r00cpu firmware	le	20
mitsubishielectric:r01cpu_firmware	mitsubishielectric r01cpu firmware	le	20
mitsubishielectric:r02cpu_firmware	mitsubishielectric r02cpu firmware	le	20
mitsubishielectric:r04cpu_firmware	mitsubishielectric r04cpu firmware	le	52
mitsubishielectric:r08cpu_firmware	mitsubishielectric r08cpu firmware	le	52
mitsubishielectric:r16cpu_firmware	mitsubishielectric r16cpu firmware	le	52
mitsubishielectric:r32cpu_firmware	mitsubishielectric r32cpu firmware	le	52
mitsubishielectric:r120cpu_firmware	mitsubishielectric r120cpu firmware	le	52
mitsubishielectric:r08sfcpu_firmware	mitsubishielectric r08sfcpu firmware	le	22
mitsubishielectric:r16sfcpu_firmware	mitsubishielectric r16sfcpu firmware	le	22

Rows per page:

1-10 of 191

References

blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-series

us-cert.cisa.gov/ics/advisories/icsa-20-282-02

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

44.2%

JSON

Related for CVE-2020-16850

cvelist1 nessus1 prion1 ics1