CVE-2020-5668

🗓️ 20 Nov 2020 03:30:23Reported by jpcertType

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series module

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-5668	20 Nov 202007:42	–	circl
CNNVD	Mitsubishi Electric MELSEC iQ-R series Resource Management Error Vulnerability	19 Nov 202000:00	–	cnnvd
Cvelist	CVE-2020-5668	20 Nov 202003:30	–	cvelist
EUVD	EUVD-2020-26829	7 Oct 202500:30	–	euvd
ICS	Mitsubishi Electric MELSEC iQ-R Series (Update C)	19 Nov 202000:00	–	ics
NVD	CVE-2020-5668	20 Nov 202004:15	–	nvd
OSV	CVE-2020-5668	20 Nov 202004:15	–	osv
Prion	Design/Logic Flaw	20 Nov 202004:15	–	prion
RedhatCVE	CVE-2020-5668	22 May 202517:42	–	redhatcve
Tenable Nessus	Mitsubishi Electric MELSEC iQ-R Series Uncontrolled Resource Consumption (CVE-2020-5668)	7 Feb 202200:00	–	nessus

NVD

Node

mitsubishielectric r00cpu_firmwareRange≤19

AND

mitsubishielectric r00cpuMatch-

Node

mitsubishielectric r01cpu_firmwareRange≤19

AND

mitsubishielectric r01cpuMatch-

Node

mitsubishielectric r02cpu_firmwareRange≤19

AND

mitsubishielectric r02cpuMatch-

Node

mitsubishielectric r04cpu_firmwareRange≤51

AND

mitsubishielectric r04cpuMatch-

Node

mitsubishielectric r08cpu_firmwareRange≤51

AND

mitsubishielectric r08cpuMatch-

Node

mitsubishielectric r16cpu_firmwareRange≤51

AND

mitsubishielectric r16cpuMatch-

Node

mitsubishielectric r32cpu_firmwareRange≤51

AND

mitsubishielectric r32cpuMatch-

Node

mitsubishielectric r120cpu_firmwareRange≤51

AND

mitsubishielectric r120cpuMatch-

Node

mitsubishielectric r08sfcpu_firmwareRange≤22

AND

mitsubishielectric r08sfcpuMatch-

Node

mitsubishielectric r16sfcpu_firmwareRange≤22

AND

mitsubishielectric r16sfcpuMatch-

Node

mitsubishielectric r32sfcpu_firmwareRange≤22

AND

mitsubishielectric r32sfcpuMatch-

Node

mitsubishielectric r120sfcpu_firmwareRange≤22

AND

mitsubishielectric r120sfcpuMatch-

Node

mitsubishielectric r08pcpu_firmwareRange≤25

AND

mitsubishielectric r08pcpuMatch-

Node

mitsubishielectric r16pcpu_firmwareRange≤25

AND

mitsubishielectric r16pcpuMatch-

Node

mitsubishielectric r32pcpu_firmwareRange≤25

AND

mitsubishielectric r32pcpuMatch-

Node

mitsubishielectric r120pcpu_firmwareRange≤25

AND

mitsubishielectric r120pcpuMatch-

Node

mitsubishielectric r08psfcpu_firmwareRange≤06

AND

mitsubishielectric r08psfcpuMatch-

Node

mitsubishielectric r16psfcpu_firmwareRange≤06

AND

mitsubishielectric r16psfcpuMatch-

Node

mitsubishielectric r32psfcpu_firmwareRange≤06

AND

mitsubishielectric r32psfcpuMatch-

Node

mitsubishielectric r120psfcpu_firmwareRange≤06

AND

mitsubishielectric r120psfcpuMatch-

Node

mitsubishielectric rj71en71_firmwareRange≤47

AND

mitsubishielectric rj71en71Match-

Node

mitsubishielectric rj71gf11-t2_firmwareRange≤47

AND

mitsubishielectric rj71gf11-t2Match-

Node

mitsubishielectric rj72gf15-t2_firmwareRange≤07

AND

mitsubishielectric rj72gf15-t2Match-

Node

mitsubishielectric rj71gp21-sx_firmwareRange≤47

AND

mitsubishielectric rj71gp21-sxMatch-

Node

mitsubishielectric rj71gp21s-sx_firmwareRange≤47

AND

mitsubishielectric rj71gp21s-sxMatch-

Node

mitsubishielectric rj71c24-r2_firmwareRange≤47

AND

mitsubishielectric rj71c24-r2Match-

Node

mitsubishielectric rj71c24-r4_firmwareRange≤47

AND

mitsubishielectric rj71c24-r4Match-

Node

mitsubishielectric rj71gn11-t2_firmwareRange≤11

AND

mitsubishielectric rj71gn11-t2Match-

[
  {
    "product": "MELSEC iQ-R",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU firmware version '06' and earlier, RJ71EN71 firmware version '47' and earlier, RJ71GF11-T2 firmware version '47' and earlier, RJ72GF15-T2 firmware version '07' and earlier, RJ71GP21-SX firmware version '47' and earlier, RJ71GP21S-SX firmware version '47' and earlier, and RJ71GN11-T2 firmware version '11' and earlier"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU95980140/index.html
mitsubishielectric	www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdf
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-324-05
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdf

21 Nov 2024 05:34Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 27.8

EPSS0.03119

CWE-400