7.5

CVE-2020-5527

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mitsubishielectric ≫ Fx3g Firmware Version-
   Mitsubishielectric ≫ Fx3g Version-
Mitsubishielectric ≫ Fx3gc Firmware Version-
   Mitsubishielectric ≫ Fx3gc Version-
Mitsubishielectric ≫ Fx3s Firmware Version-
   Mitsubishielectric ≫ Fx3s Version-
Mitsubishielectric ≫ Fx3u Firmware Version-
   Mitsubishielectric ≫ Fx3u Version-
Mitsubishielectric ≫ Fx3uc Firmware Version-
   Mitsubishielectric ≫ Fx3uc Version-
Mitsubishielectric ≫ Fx5u Firmware Version-
   Mitsubishielectric ≫ Fx5u Version-
Mitsubishielectric ≫ Fx5uc Firmware Version-
   Mitsubishielectric ≫ Fx5uc Version-
Mitsubishielectric ≫ Fx5uj Firmware Version-
   Mitsubishielectric ≫ Fx5uj Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.616
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.