7.5

CVE-2020-5527

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mitsubishielectric ≫ Fx3g Firmware Version -
   Mitsubishielectric ≫ Fx3g Version -
Mitsubishielectric ≫ Fx3gc Firmware Version -
   Mitsubishielectric ≫ Fx3gc Version -
Mitsubishielectric ≫ Fx3s Firmware Version -
   Mitsubishielectric ≫ Fx3s Version -
Mitsubishielectric ≫ Fx3u Firmware Version -
   Mitsubishielectric ≫ Fx3u Version -
Mitsubishielectric ≫ Fx3uc Firmware Version -
   Mitsubishielectric ≫ Fx3uc Version -
Mitsubishielectric ≫ Fx5u Firmware Version -
   Mitsubishielectric ≫ Fx5u Version -
Mitsubishielectric ≫ Fx5uc Firmware Version -
   Mitsubishielectric ≫ Fx5uc Version -
Mitsubishielectric ≫ Fx5uj Firmware Version -
   Mitsubishielectric ≫ Fx5uj Version -
Mitsubishielectric ≫ L02cpu Firmware Version -
   Mitsubishielectric ≫ L02cpu Version -
Mitsubishielectric ≫ L06cpu Firmware Version -
   Mitsubishielectric ≫ L06cpu Version -
Mitsubishielectric ≫ L26cpu Firmware Version -
   Mitsubishielectric ≫ L26cpu Version -
Mitsubishielectric ≫ R00cpu Firmware Version -
   Mitsubishielectric ≫ R00cpu Version -
Mitsubishielectric ≫ R01cpu Firmware Version -
   Mitsubishielectric ≫ R01cpu Version -
Mitsubishielectric ≫ R02cpu Firmware Version -
   Mitsubishielectric ≫ R02cpu Version -
Mitsubishielectric ≫ R04cpu Firmware Version -
   Mitsubishielectric ≫ R04cpu Version -
Mitsubishielectric ≫ R08cpu Firmware Version -
   Mitsubishielectric ≫ R08cpu Version -
Mitsubishielectric ≫ R16cpu Firmware Version -
   Mitsubishielectric ≫ R16cpu Version -
Mitsubishielectric ≫ R32cpu Firmware Version -
   Mitsubishielectric ≫ R32cpu Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.37% 0.695
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://jvn.jp/en/vu/JVNVU91553662/index.html
Third Party Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf
Vendor Advisory