Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000

🗓️ 18 Feb 2020 03:10:54Reported by Japan Vulnerability NotesType

TCP/IP vulnerabilities in Mitsubishi MELSEC C Controller and MELIPC MI5000 from URGENT/11 IPnet flaws in VxWorks.

Reporter	Title	Published	Views	Family All 175
0day.today	VxWorks 6.8 - TCP Urgent Pointer = 0 Integer Underflow Exploit	12 Aug 201900:00	–	zdt
Tenable Nessus	VxWorks 6.9.x < 6.9.4.12 / 7 (SR540) / 7 (SR610) Multiple Vulnerabilities (URGENT/11)	29 Jul 201900:00	–	nessus
Tenable Nessus	VxWorks 6.x < 6.9.4 Multiple Vulnerabilities (URGENT/11)	29 Jul 201900:00	–	nessus
Tenable Nessus	Cisco SPA100 Series Multiple Vulnerabilities	17 Oct 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks Unspecified Vulnerability	8 Nov 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks NULL Pointer Dereference	8 Nov 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer	8 Nov 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer	8 Nov 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer	8 Nov 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks Session Fixation	8 Nov 201900:00	–	nessus

Source	Link
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-003_en.pdf
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
us-cert	www.us-cert.gov/ics/advisories/icsa-19-274-01
jvn	www.jvn.jp/en/vu/JVNVU95424547/index.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-5531
windriver	www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/

18 Feb 2020 03:10Current

7.2High risk

Vulners AI Score7.2

CVSS 27.5

CVSS 3.19.8

EPSS0.84177