Design/Logic Flaw

2020-06-1020:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production.

CPENameOperatorVersion
melsec_iq-r00cpu_firmwarele7
melsec_iq-r01cpu_firmwarele7
melsec_iq-r02cpu_firmwarele7
melsec_iq-r04cpu_firmwarele39
melsec_iq-r08cpu_firmwarele39
melsec_iq-r08fcpu_firmwarele20
melsec_iq-r120cpu_firmwarele39
melsec_iq-r120fcpu_firmwarele20
melsec_iq-r16cpu_firmwarele39
melsec_iq-r16fcpu_firmwarele20

Name	Operator	Version
melsec_iq-r00cpu_firmware	le	7
melsec_iq-r01cpu_firmware	le	7
melsec_iq-r02cpu_firmware	le	7
melsec_iq-r04cpu_firmware	le	39
melsec_iq-r08cpu_firmware	le	39
melsec_iq-r08fcpu_firmware	le	20
melsec_iq-r120cpu_firmware	le	39
melsec_iq-r120fcpu_firmware	le	20
melsec_iq-r16cpu_firmware	le	39
melsec_iq-r16fcpu_firmware	le	20