CVE-2020-5652

🗓️ 30 Oct 2020 03:35:51Reported by jpcertType

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules. Allows remote unauthenticated attacker to stop Ethernet communication functions, causing denial of service (DoS)

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2020-5652	30 Oct 202003:35	–	cvelist
EUVD	EUVD-2020-26813	7 Oct 202500:30	–	euvd
ICS	Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)	29 Oct 202006:00	–	ics
NVD	CVE-2020-5652	2 Nov 202021:15	–	nvd
Tenable Nessus	Mitsubishielectric Melsec Uncontrolled Resource Consumption	10 Aug 202100:00	–	nessus
Tenable Nessus	Mitsubishi Electric MELSEC iQ-R, Q and L Series Uncontrolled Resource Consumption (CVE-2020-5652)	7 Feb 202200:00	–	nessus
Prion	Race condition	2 Nov 202021:15	–	prion
Positive Technologies	PT-2020-18619 · Mitsubishi · Melsec Q03 Udecpu +11	30 Oct 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-5652	22 May 202517:42	–	redhatcve

NVD

Node

mitsubishielectric melsec_q-q04udpvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q04udpvcpuMatch-

Node

mitsubishielectric melsec_q-q06udpvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q06udpvcpuMatch-

Node

mitsubishielectric melsec_q-q13udpvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q13udpvcpuMatch-

Node

mitsubishielectric melsec_q-q26udpvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q26udpvcpuMatch-

Node

mitsubishielectric melsec_q-q03udvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q03udvcpuMatch-

Node

mitsubishielectric melsec_q-q04udvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q04udvcpuMatch-

Node

mitsubishielectric melsec_q-q13udvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q13udvcpuMatch-

Node

mitsubishielectric melsec_q-q26udvcpu_firmwareMatch22031

AND

mitsubishielectric melsec_q-q26udvcpuMatch-

Node

mitsubishielectric melsec_q-q03udecpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q03udecpuMatch-

Node

mitsubishielectric melsec_q-q04udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q04udehcpuMatch-

Node

mitsubishielectric melsec_q-q06udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q06udehcpuMatch-

Node

mitsubishielectric melsec_q-q10udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q10udehcpuMatch-

Node

mitsubishielectric melsec_q-q13udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q13udehcpuMatch-

Node

mitsubishielectric melsec_q-q20udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q20udehcpuMatch-

Node

mitsubishielectric melsec_q-q26udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q26udehcpuMatch-

Node

mitsubishielectric melsec_q-q50udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q50udehcpuMatch-

Node

mitsubishielectric melsec_q-q100udehcpu_firmwareMatch22081

AND

mitsubishielectric melsec_q-q100udehcpuMatch-

Node

mitsubishielectric melsec_iq-r08sfcpu_firmwareMatch22

AND

mitsubishielectric melsec_iq-r08sfcpuMatch-

Node

mitsubishielectric melsec_iq-r16sfcpu_firmwareMatch22

AND

mitsubishielectric melsec_iq-r16sfcpuMatch-

Node

mitsubishielectric melsec_iq-r32sfcpu_firmwareMatch22

AND

mitsubishielectric melsec_iq-r32sfcpuMatch-

Node

mitsubishielectric melsec_iq-r120sfcpu_firmwareMatch22

AND

mitsubishielectric melsec_iq-r120sfcpuMatch-

Node

mitsubishielectric melsec_iq-r04encpu_firmwareMatch52

AND

mitsubishielectric melsec_iq-r04encpuMatch-

Node

mitsubishielectric melsec_iq-r08encpu_firmwareMatch52

AND

mitsubishielectric melsec_iq-r08encpuMatch-

Node

mitsubishielectric melsec_iq-r16encpu_firmwareMatch52

AND

mitsubishielectric melsec_iq-r16encpuMatch-

Node

mitsubishielectric melsec_iq-r32encpu_firmwareMatch52

AND

mitsubishielectric melsec_iq-r32encpuMatch-

Node

mitsubishielectric melsec_iq-r120encpu_firmwareMatch52

AND

mitsubishielectric melsec_iq-r120encpuMatch-

Node

mitsubishielectric melsec_iq-r00cpu_firmwareMatch20

AND

mitsubishielectric melsec_iq-r00cpuMatch-

Node

mitsubishielectric melsec_iq-r01cpu_firmwareMatch20

AND

mitsubishielectric melsec_iq-r01cpuMatch-

Node

mitsubishielectric melsec_iq-r02cpu_firmwareMatch20

AND

mitsubishielectric melsec_iq-r02cpuMatch-

Node

mitsubishielectric melsec_iq-r08pcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r08pcpuMatch-

Node

mitsubishielectric melsec_iq-r08psfcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r08psfcpuMatch-

Node

mitsubishielectric melsec_iq-r120pcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r120pcpuMatch-

Node

mitsubishielectric melsec_iq-r120psfcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r120psfcpuMatch-

Node

mitsubishielectric melsec_iq-r16mtcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r16mtcpuMatch-

Node

mitsubishielectric melsec_iq-r16pcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r16pcpuMatch-

Node

mitsubishielectric melsec_iq-r16psfcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r16psfcpuMatch-

Node

mitsubishielectric melsec_iq-r32mtcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r32mtcpuMatch-

Node

mitsubishielectric melsec_iq-r32pcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r32pcpuMatch-

Node

mitsubishielectric melsec_iq-r32psfcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r32psfcpuMatch-

Node

mitsubishielectric melsec_iq-r64mtcpu_firmwareMatch-

AND

mitsubishielectric melsec_iq-r64mtcpuMatch-

Node

mitsubishielectric melsec_l02cpu-p_firmwareMatch-

AND

mitsubishielectric melsec_l02cpu-pMatch-

Node

mitsubishielectric melsec_l06cpu-p_firmwareMatch-

AND

mitsubishielectric melsec_l06cpu-pMatch-

Node

mitsubishielectric melsec_l26cpu-p_firmwareMatch-

AND

mitsubishielectric melsec_l26cpu-pMatch-

Node

mitsubishielectric melsec_l26cpu-pbt_firmwareMatch-

AND

mitsubishielectric melsec_l26cpu-pbtMatch-

Node

mitsubishielectric melsec_q-q170mcpu_firmwareMatch-

AND

mitsubishielectric melsec_q-q170mcpuMatch-

Node

mitsubishielectric melsec_q-q170mscpu-s1_firmwareMatch-

AND

mitsubishielectric melsec_q-q170mscpu-s1Match-

Node

mitsubishielectric melsec_q-q172dcpu-s1_firmwareMatch-

AND

mitsubishielectric melsec_q-q172dcpu-s1Match-

Node

mitsubishielectric melsec_q-q172dscpu_firmwareMatch-

AND

mitsubishielectric melsec_q-q172dscpuMatch-

Node

mitsubishielectric melsec_q-q173dcpu-s1_firmwareMatch-

AND

mitsubishielectric melsec_q-q173dcpu-s1Match-

Node

mitsubishielectric melsec_q-q173dscpu_firmwareMatch-

AND

mitsubishielectric melsec_q-q173dscpuMatch-

Node

mitsubishielectric melsec_q-qmr-mq100_firmwareMatch-

AND

mitsubishielectric melsec_q-qmr-mq100Match-

[
  {
    "product": "MELSEC iQ-R, Q and L series",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier, Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, and L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU96558207/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf
mitsubishielectric	www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf

21 Nov 2024 05:34Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.02972

CWE-400