CVE-2020-16850

🗓️ 30 Nov 2020 21:34:28Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 58 Views

Mitsubishi MELSEC iQ-R Series PLCs firmware 49 allows unauthenticated attacker to halt industrial process via crafted packet, leading to DoS and physical access requirement for restoring production. Related to R04CPU, RJ71GF11-T2

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-16850	1 Dec 202000:53	–	circl
Cvelist	CVE-2020-16850	30 Nov 202021:34	–	cvelist
EUVD	EUVD-2020-8808	7 Oct 202500:30	–	euvd
ICS	Mitsubishi Electric MELSEC iQ-R Series (Update D)	19 Nov 202007:00	–	ics
NVD	CVE-2020-16850	30 Nov 202022:15	–	nvd
Prion	Input validation	30 Nov 202022:15	–	prion
RedhatCVE	CVE-2020-16850	22 May 202515:15	–	redhatcve
Tenable Nessus	Mitsubishi Electric MELSEC iQ-R Series Uncontrolled Resource Consumption (CVE-2020-16850)	7 Feb 202200:00	–	nessus

NVD

Node

mitsubishielectric r00cpu_firmwareRange≤20

AND

mitsubishielectric r00cpuMatch-

Node

mitsubishielectric r01cpu_firmwareRange≤20

AND

mitsubishielectric r01cpuMatch-

Node

mitsubishielectric r02cpu_firmwareRange≤20

AND

mitsubishielectric r02cpuMatch-

Node

mitsubishielectric r04cpu_firmwareRange≤52

AND

mitsubishielectric r04cpuMatch-

Node

mitsubishielectric r08cpu_firmwareRange≤52

AND

mitsubishielectric r08cpuMatch-

Node

mitsubishielectric r16cpu_firmwareRange≤52

AND

mitsubishielectric r16cpuMatch-

Node

mitsubishielectric r32cpu_firmwareRange≤52

AND

mitsubishielectric r32cpuMatch-

Node

mitsubishielectric r120cpu_firmwareRange≤52

AND

mitsubishielectric r120cpuMatch-

Node

mitsubishielectric r08sfcpu_firmwareRange≤22

AND

mitsubishielectric r08sfcpuMatch-

Node

mitsubishielectric r16sfcpu_firmwareRange≤22

AND

mitsubishielectric r16sfcpuMatch-

Node

mitsubishielectric r32sfcpu_firmwareRange≤22

AND

mitsubishielectric r32sfcpuMatch-

Node

mitsubishielectric r120sfcpu_firmwareRange≤22

AND

mitsubishielectric r120sfcpuMatch-

Node

mitsubishielectric r08pcpu_firmware

AND

mitsubishielectric r08pcpuMatch-

Node

mitsubishielectric r16pcpu_firmware

AND

mitsubishielectric r16pcpuMatch-

Node

mitsubishielectric r32pcpu_firmware

AND

mitsubishielectric r32pcpuMatch-

Node

mitsubishielectric r120pcpu_firmware

AND

mitsubishielectric r120pcpuMatch-

Node

mitsubishielectric r16mtcpu_firmware

AND

mitsubishielectric r16mtcpuMatch-

Node

mitsubishielectric r32mtcpu_firmware

AND

mitsubishielectric r32mtcpuMatch-

Node

mitsubishielectric r64mtcpu_firmware

AND

mitsubishielectric r64mtcpuMatch-

Source	Link
blog	www.blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-series
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-282-02

21 Nov 2024 05:07Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 27.8

EPSS0.00516

cve-2020-16850 mitsubishi melsec iq-r plcs firmware dos physical access r04cpu rj71gf11-t2