CVE-2020-5658

The CVE-2020-5658 entry concerns a Resource Management Errors vulnerability in the TCP/IP functionality of MELSEC iQ-R series firmware. Affected modules and serial-number guards: EtherNet/IP Network Interface Module RJ71EIP91 (first two digits of serial ≤ 02), PROFINET IO Controller RJ71PN92 (≤ 0...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

CVE-2020-5657

The CVE-2020-5657 issue affects MELSEC iQ-R firmware and is caused by improper neutralization of argument delimiters in a TCP/IP function. A crafted packet from an adjacent network could cause a denial-of-service condition or stop network functions on affected modules: RJ71EIP91 (EtherNet/IP), RJ...

CVE-2020-5655

CVE-2020-5655 is a NULL pointer dereference vulnerability in the TCP/IP code of MELSEC iQ‑R firmware. A remote, unauthenticated attacker can stop network functions by sending a specially crafted packet. Affected modules and serial-number constraints from connected sources: EtherNet/IP Network Int...

CVE-2020-5655

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

CVE-2020-5656

CVE-2020-5656 affects Mitsubishi Electric MELSEC iQ-R Series firmware: EtherNet/IP/PROFINET interface modules RJ71EIP91, RJ71PN92, and data/OPC modules RD81DL96, RD81MES96N, RD81OPC96. Root cause: improper access control in the TCP/IP function, enabling a remote unauthenticated attacker to stop n...

CVE-2020-5656

Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

CVE-2020-5654

Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96...

CVE-2020-5654

CVE-2020-5654 is a session-fixation vulnerability in the TCP/IP function of MELSEC iQ-R series firmware. A remote, unauthenticated attacker can stop the network functions of affected modules by sending a specially crafted packet. Affected MELSEC iQ-R components include EtherNet/IP Network Interfa...

CVE-2020-5653

CVE-2020-5653 is a buffer overflow in the MELSEC iQ-R firmware TCP/IP stack (affecting EtherNet/IP RJ71EIP91, PROFINET RJ71PN92, RD81DL96, RD81MES96N, RD81OPC96). Root cause: improper restriction within the bounds of a memory buffer. Impact per sources: remote attacker can stop network functions ...

CVE-2020-5652

The CVE-2020-5652 vulnerability affects Mitsubishi Electric MELSEC iQ-R, Q, and L Series CPU modules. A specially crafted Ethernet packet can cause uncontrolled resource consumption, stopping Ethernet communications and leading to a DoS. Affected products include iQ-R CPUs (R00, R01, R02, R04 EN,...

CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...

PT-2020-18619 · Mitsubishi · Melsec Q03 Udecpu +11

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R series CPU modules versions '20' and earlier MELSEC Q series CPU modules versions '52' and earlier MELSEC L series CPU modules versions with serial number '22081' and earlier MELSEC iQ-R R 04/08/16/32/120 EN CPU firmware versions...

Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a...

Mitsubishi Electric MELSEC iQ-R

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation, NULL Pointer Dereference, Improper Access...

Unspecified Vulnerability in Multiple Mitsubishi Electric Products

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric. A security vulnerability exists in a number of Mitsubishi Electric products. The vulnerability, which arises from the use of cleartext communication between a CPU module and GX Works3 or GX...

CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...

CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX series CPU modules (all versions) are affected by CVE-2020-5594 due to cleartext transmission of sensitive information between CPU modules and GX Works3/GX Works2. The root cause is unsecured (cleartext) communication, with vectors not specified ...

CVE-2020-13238

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...

CVE-2020-13238

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...