CVEvulnerability

CVE-2020-5527

7.5 HIGH Published 2020-03-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-400

Description

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.

Affected configurations

• mitsubishielectric cr800-q firmware • mitsubishielectric fx3g firmware • mitsubishielectric fx3gc firmware • mitsubishielectric fx3s firmware • mitsubishielectric fx3u firmware • mitsubishielectric fx3uc firmware • mitsubishielectric fx5u firmware • mitsubishielectric fx5uc firmware • mitsubishielectric fx5uj firmware • mitsubishielectric l02cpu firmware • mitsubishielectric l02cpu-p firmware • mitsubishielectric l02scpu firmware • mitsubishielectric l02scpu-p firmware • mitsubishielectric l06cpu firmware • mitsubishielectric l06cpu-p firmware • mitsubishielectric l26cpu firmware • mitsubishielectric l26cpu-bt firmware • mitsubishielectric l26cpu-p firmware • mitsubishielectric l26cpu-pbt firmware • mitsubishielectric q02phcpu firmware • mitsubishielectric q06phcpu firmware • mitsubishielectric q12dccpu-v firmware • mitsubishielectric q12phcpu firmware • mitsubishielectric q12prhcpu firmware • mitsubishielectric q172dscpu firmware • mitsubishielectric q173dscpu firmware • mitsubishielectric q173nccpu firmware • mitsubishielectric q24dhccpu-ls firmware • mitsubishielectric q24dhccpu-v firmware • mitsubishielectric q24dhccpu-vg2 firmware • mitsubishielectric q25phcpu firmware • mitsubishielectric q25prhcpu firmware • mitsubishielectric q26dhccpu-ls firmware • mitsubishielectric r00cpu firmware • mitsubishielectric r01cpu firmware • mitsubishielectric r02cpu firmware • mitsubishielectric r04cpu firmware • mitsubishielectric r04encpu firmware • mitsubishielectric r08cpu firmware • mitsubishielectric r08encpu firmware • mitsubishielectric r120cpu firmware • mitsubishielectric r120encpu firmware • mitsubishielectric r16cpu firmware • mitsubishielectric r16encpu firmware • mitsubishielectric r32cpu firmware • mitsubishielectric r32encpu firmware

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References