Lucene search

K
nvd[email protected]NVD:CVE-2020-5594
HistoryJun 23, 2020 - 8:15 a.m.

CVE-2020-5594

2020-06-2308:15:10
CWE-319
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.005 Low

EPSS

Percentile

76.5%

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors.

Affected configurations

NVD
Node
mitsubishielectricmelsec_iq-rMatch-
AND
mitsubishielectricmelsec_iq-r_firmware
Node
mitsubishielectricmelsec_iq-fMatch-
AND
mitsubishielectricmelsec_iq-f_firmware
Node
mitsubishielectricmelsec-qMatch-
AND
mitsubishielectricmelsec-q_firmware
Node
mitsubishielectricmelsec-lMatch-
AND
mitsubishielectricmelsec-l_firmware
Node
mitsubishielectricmelsec-fxMatch-
AND
mitsubishielectricmelsec-fx_firmware

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.005 Low

EPSS

Percentile

76.5%

Related for NVD:CVE-2020-5594