CVE-2020-5666

🗓️ 16 Nov 2020 00:49:55Reported by jpcertType

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Module

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2020-5666	16 Nov 202000:49	–	cvelist
ICS	Mitsubishi Electric MELSEC iQ-R Series	12 Nov 202000:00	–	ics
Japan Vulnerability Notes	JVN#44764844: MELSEC iQ-R Series CPU Modules vulnerable to uncontrolled resource consumption	12 Nov 202000:00	–	jvn
Japan Vulnerability Notes	MELSEC iQ-R Series CPU Modules vulnerable to uncontrolled resource consumption	12 Nov 202005:58	–	jvn
NVD	CVE-2020-5666	16 Nov 202001:15	–	nvd
OSV	CVE-2020-5666	16 Nov 202001:15	–	osv
Prion	Design/Logic Flaw	16 Nov 202001:15	–	prion
RedhatCVE	CVE-2020-5666	22 May 202515:39	–	redhatcve
Tenable Nessus	Mitsubishi Electric MELSEC iQ-R Series Uncontrolled Resource Consumption (CVE-2020-5666)	7 Feb 202200:00	–	nessus

NVD

Node

mitsubishielectric melsec_iq-r00_firmwareRange05–19

AND

mitsubishielectric melsec_iq-r00Match-

Node

mitsubishielectric melsec_iq-r01_firmwareRange05–19

AND

mitsubishielectric melsec_iq-r01Match-

Node

mitsubishielectric melsec_iq-r02_firmwareRange05–19

AND

mitsubishielectric melsec_iq-r02Match-

Node

mitsubishielectric melsec_iq-r04_firmwareRange35–51

AND

mitsubishielectric melsec_iq-r04Match-

Node

mitsubishielectric melsec_iq-r16_firmwareRange35–51

AND

mitsubishielectric melsec_iq-r16Match-

Node

mitsubishielectric melsec_iq-r08_firmwareRange35–51

AND

mitsubishielectric melsec_iq-r08Match-

Node

mitsubishielectric melsec_iq-r32_firmwareRange35–51

AND

mitsubishielectric melsec_iq-r32Match-

Node

mitsubishielectric melsec_iq-r120_firmwareRange35–51

AND

mitsubishielectric melsec_iq-r120Match-

[
  {
    "product": "MELSEC iQ-R Series CPU Modules",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51'"
      }
    ]
  }
]

Source	Link
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-015_en.pdf
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-317-01
jvn	www.jvn.jp/jp/JVN44764844/index.html
jvn	www.jvn.jp/en/jp/JVN44764844/index.html

21 Nov 2024 05:34Current

7.4High risk

Vulners AI Score7.4

CVSS 27.1

CVSS 3.17.5

EPSS0.18403

CWE-400