CVE-2020-5657: Command injection vulnerability in MELSEC iQ-R series firmwar
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | Mitsubishi Electric MELSEC iQ-R Improper Neutralization of Argument Delimiters in a Command (CVE-2020-5657) | 7 Feb 202200:00 | – | nessus |
![]() | Design/Logic Flaw | 2 Nov 202021:15 | – | prion |
![]() | CVE-2020-5657 | 2 Nov 202021:15 | – | nvd |
![]() | CVE-2020-5657 | 30 Oct 202003:35 | – | cvelist |
![]() | Mitsubishi Electric MELSEC iQ-R | 29 Oct 202000:00 | – | ics |
[
{
"product": "MELSEC iQ-R series",
"vendor": "Mitsubishi Electric Corporation",
"versions": [
{
"status": "affected",
"version": "RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before"
}
]
}
]
Source | Link |
---|---|
mitsubishielectric | www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf |
mitsubishielectric | www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf |
jvn | www.jvn.jp/vu/JVNVU92513419/index.html |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo