Lucene search

K
cveJpcertCVE-2020-5531
HistoryFeb 17, 2020 - 7:15 a.m.

CVE-2020-5531

2020-02-1707:15:16
jpcert
web.nvd.nist.gov
91
cve
mitsubishi electric
melsec
c controller module
melipc series
mi5000
denial of service
malware
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.013

Percentile

85.7%

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors.

Affected configurations

Nvd
Node
mitsubishielectricmi5122-vw_firmwareRange03
AND
mitsubishielectricmi5122-vwMatch-
Node
mitsubishielectricq24dhccpu-v_firmwareRange21121
AND
mitsubishielectricq24dhccpu-vMatch-
Node
mitsubishielectricq24dhccpu-vg_firmwareRange21121
AND
mitsubishielectricq24dhccpu-vgMatch-
Node
mitsubishielectricr12ccpu-v_firmwareRange11
AND
mitsubishielectricr12ccpu-vMatch-
Node
mitsubishielectricrd55up06-v_firmwareRange08
AND
mitsubishielectricrd55up06-vMatch-
VendorProductVersionCPE
mitsubishielectricmi5122-vw_firmware*cpe:2.3:o:mitsubishielectric:mi5122-vw_firmware:*:*:*:*:*:*:*:*
mitsubishielectricmi5122-vw-cpe:2.3:h:mitsubishielectric:mi5122-vw:-:*:*:*:*:*:*:*
mitsubishielectricq24dhccpu-v_firmware*cpe:2.3:o:mitsubishielectric:q24dhccpu-v_firmware:*:*:*:*:*:*:*:*
mitsubishielectricq24dhccpu-v-cpe:2.3:h:mitsubishielectric:q24dhccpu-v:-:*:*:*:*:*:*:*
mitsubishielectricq24dhccpu-vg_firmware*cpe:2.3:o:mitsubishielectric:q24dhccpu-vg_firmware:*:*:*:*:*:*:*:*
mitsubishielectricq24dhccpu-vg-cpe:2.3:h:mitsubishielectric:q24dhccpu-vg:-:*:*:*:*:*:*:*
mitsubishielectricr12ccpu-v_firmware*cpe:2.3:o:mitsubishielectric:r12ccpu-v_firmware:*:*:*:*:*:*:*:*
mitsubishielectricr12ccpu-v-cpe:2.3:h:mitsubishielectric:r12ccpu-v:-:*:*:*:*:*:*:*
mitsubishielectricrd55up06-v_firmware*cpe:2.3:o:mitsubishielectric:rd55up06-v_firmware:*:*:*:*:*:*:*:*
mitsubishielectricrd55up06-v-cpe:2.3:h:mitsubishielectric:rd55up06-v:-:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before)"
      }
    ]
  }
]

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.013

Percentile

85.7%

Related for CVE-2020-5531