CVE-2020-16226 Mitsubishi Electric Multiple Products

2020-09-0100:00:00
CWE-342
icscert
www.cve.org
9.6 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.1%
JSON
Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CNA Affected

[
  {
    "product": "QJ71MES96",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "QJ71WS96",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "Q06CCPU-V",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "Q24DHCCPU-V",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "Q24DHCCPU-VG",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "R12CCPU-V",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RD55UP06-V,",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "D55UP12-V",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RJ71GN11-T2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RJ71EN71",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "QJ71E71-100",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "LJ71E71-100",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "QJ71MT91",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RD78Gn(n=4,8,16,32,64)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RD78GHV",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RD78GHW",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "NZ2GACP620-60",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "NZ2GACP620-300",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "NZ2FT-MT",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "NZ2FT-EIP",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "Q03UDECPU",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": " the first 5 digits of serial number 22081 and prior"
      }
    ]
  },
  {
    "product": "QnUDEHCPU(n=04/06/10/13/20/26/50/100)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "the first 5 digits of serial number 22081 and prior"
      }
    ]
  },
  {
    "product": "QnUDVCPU(n=03/04/06/13/26)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "the first 5 digits of serial number 22031 and prior"
      }
    ]
  },
  {
    "product": "QnUDPVCPU(n=04/06/13/2)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "the first 5 digits of serial number 22031 and prior"
      }
    ]
  },
  {
    "product": "LnCPU(-P)(n=02/06/26)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "the first 5 digits of serial number 22051 and prior"
      }
    ]
  },
  {
    "product": "L26CPU-(P)BT",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "the first 5 digits of serial number 22051 and prior"
      }
    ]
  },
  {
    "product": "RnCPU(n=00/01/02)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThan": "Version 18 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RnCPU(n=04/08/16/32/120)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThan": "Version 50 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RnENCPU(n=04/08/16/32/120)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThan": "Version 50 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RnSFCPU (n=08/16/32/120)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RnPCPU(n=08/16/32/120)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "RnPSFCPU(n=08/16/32/120)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX5U(C)-**M*/**",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThan": "Serial number 17X**** or later: Version 1.210 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "Serial number 179**** and prior: Version 1.070 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "FX5UC-32M*/**-TS",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThan": "Version 1.210 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "FX5UJ-**M*/**",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": " Version 1.000"
      }
    ]
  },
  {
    "product": "FX5-ENET",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX5-ENET/IP",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX3U-ENET-ADP",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX3GE-**M*/**",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX3U-ENET",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX3U-ENET-L",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX3U-ENET-P502",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FX5-CCLGN-MS",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "IU1-1M20-D",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "LE7-40GU-L",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "GOT2000 Series GT21 Model",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "GS Series",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "GOT1000 Series GT14 Model",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "GT25-J71GN13-T2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FR-A800-E Series",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FR-F800-E Series",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "FR-A8NCG",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Production date August 2020 and prior"
      }
    ]
  },
  {
    "product": "FR-E800-EPA Series",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Production date July 2020 and prior"
      }
    ]
  },
  {
    "product": "FR-E800-EPB Series",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Production date July 2020 and prior"
      }
    ]
  },
  {
    "product": "Conveyor Tracking Application",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "APR-nTR3FH all versions"
      },
      {
        "status": "affected",
        "version": "APR-nTR6FH all versions"
      },
      {
        "status": "affected",
        "version": "APR-nTR12FH all versions"
      },
      {
        "status": "affected",
        "version": "APR-nTR20FH(n=1,2) all versions"
      }
    ]
  },
  {
    "product": "MR-JE-C",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "MR-J4-TM",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]
References

us-cert.cisa.gov/ics/advisories/icsa-20-245-01