Lucene search

[email protected]CVE-2020-5603

HistoryJun 30, 2020 - 11:15 a.m.

CVE-2020-5603

2020-06-3011:15:11

CWE-400

[email protected]

web.nvd.nist.gov

cve-2020-5603

mitsubishi electoric

fa engineering software

denial of service

dos

vulnerability

security

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.8%

JSON

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors.

Affected configurations

NVD

Node

mitsubishielectriccpu_module_logging_configuration_toolRange≤1.94y

mitsubishielectriccw_configuratorRange≤1.010l

mitsubishielectricem_configuratorRange≤1.010l

mitsubishielectricgt_designer3Range≤1.221f

mitsubishielectricgx_logviewerRange≤1.100e

mitsubishielectricgx_works2Range≤1.590q

mitsubishielectricgx_works3Range≤1.060n

mitsubishielectricm_commdtm-hartRange≤1.01b

mitsubishielectricm_commdtm-io-linkRange≤1.03d

mitsubishielectricmelfa-worksRange≤4.4

mitsubishielectricmelsec-l_flexible_high-speed_i\/o_control_module_configuration_toolRange≤1.005f

mitsubishielectricmelsoft_fielddeviceconfiguratorRange≤1.04e

mitsubishielectricmelsoft_iq_appportalRange≤1.14q

mitsubishielectricmelsoft_navigatorRange≤2.62q

mitsubishielectricmi_configuratorRange≤1.004e

mitsubishielectricmotion_control_settingRange≤1.006g

mitsubishielectricmr_configurator2Range≤1.100e

mitsubishielectricmt_works2Range≤1.160s

mitsubishielectricrt_toolbox2Range≤3.73b

mitsubishielectricrt_toolbox3Range≤1.60n

CPENameOperatorVersion
mitsubishielectric:cpu_module_logging_configuration_toolmitsubishielectric cpu module logging configuration toolle1.94y
mitsubishielectric:cw_configuratormitsubishielectric cw configuratorle1.010l
mitsubishielectric:em_configuratormitsubishielectric em configuratorle1.010l
mitsubishielectric:gt_designer3mitsubishielectric gt designer3le1.221f
mitsubishielectric:gx_logviewermitsubishielectric gx logviewerle1.100e
mitsubishielectric:gx_works2mitsubishielectric gx works2le1.590q
mitsubishielectric:gx_works3mitsubishielectric gx works3le1.060n
mitsubishielectric:m_commdtm-hartmitsubishielectric m commdtm-hartle1.01b
mitsubishielectric:m_commdtm-io-linkmitsubishielectric m commdtm-io-linkle1.03d
mitsubishielectric:melfa-worksmitsubishielectric melfa-worksle4.4

CPE	Name	Operator	Version
mitsubishielectric:cpu_module_logging_configuration_tool	mitsubishielectric cpu module logging configuration tool	le	1.94y
mitsubishielectric:cw_configurator	mitsubishielectric cw configurator	le	1.010l
mitsubishielectric:em_configurator	mitsubishielectric em configurator	le	1.010l
mitsubishielectric:gt_designer3	mitsubishielectric gt designer3	le	1.221f
mitsubishielectric:gx_logviewer	mitsubishielectric gx logviewer	le	1.100e
mitsubishielectric:gx_works2	mitsubishielectric gx works2	le	1.590q
mitsubishielectric:gx_works3	mitsubishielectric gx works3	le	1.060n
mitsubishielectric:m_commdtm-hart	mitsubishielectric m commdtm-hart	le	1.01b
mitsubishielectric:m_commdtm-io-link	mitsubishielectric m commdtm-io-link	le	1.03d
mitsubishielectric:melfa-works	mitsubishielectric melfa-works	le	4.4

Rows per page:

1-10 of 201

CNA Affected

[
  {
    "product": "Mitsubishi Electoric FA Engineering Software",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU90307594/index.html

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.8%

JSON

Related for CVE-2020-5603

cvelist1 prion1 nvd1 nessus1 ics1