CVE-2020-5652

Published Oct 30, 2020 CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed
Description
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition .

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-26813 Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition .
History

No history.

Subscriptions

Mitsubishielectric Melsec Iq-r00cpu Melsec Iq-r00cpu Firmware Melsec Iq-r01cpu Melsec Iq-r01cpu Firmware Melsec Iq-r02cpu Melsec Iq-r02cpu Firmware Melsec Iq-r04encpu Melsec Iq-r04encpu Firmware Melsec Iq-r08encpu Melsec Iq-r08encpu Firmware Melsec Iq-r08pcpu Melsec Iq-r08pcpu Firmware Melsec Iq-r08psfcpu Melsec Iq-r08psfcpu Firmware Melsec Iq-r08sfcpu Melsec Iq-r08sfcpu Firmware Melsec Iq-r120encpu Melsec Iq-r120encpu Firmware Melsec Iq-r120pcpu Melsec Iq-r120pcpu Firmware Melsec Iq-r120psfcpu Melsec Iq-r120psfcpu Firmware Melsec Iq-r120sfcpu Melsec Iq-r120sfcpu Firmware Melsec Iq-r16encpu Melsec Iq-r16encpu Firmware Melsec Iq-r16mtcpu Melsec Iq-r16mtcpu Firmware Melsec Iq-r16pcpu Melsec Iq-r16pcpu Firmware Melsec Iq-r16psfcpu Melsec Iq-r16psfcpu Firmware Melsec Iq-r16sfcpu Melsec Iq-r16sfcpu Firmware Melsec Iq-r32encpu Melsec Iq-r32encpu Firmware Melsec Iq-r32mtcpu Melsec Iq-r32mtcpu Firmware Melsec Iq-r32pcpu Melsec Iq-r32pcpu Firmware Melsec Iq-r32psfcpu Melsec Iq-r32psfcpu Firmware Melsec Iq-r32sfcpu Melsec Iq-r32sfcpu Firmware Melsec Iq-r64mtcpu Melsec Iq-r64mtcpu Firmware Melsec L02cpu-p Melsec L02cpu-p Firmware Melsec L06cpu-p Melsec L06cpu-p Firmware Melsec L26cpu-p Melsec L26cpu-p Firmware Melsec L26cpu-pbt Melsec L26cpu-pbt Firmware Melsec Q-q03udecpu Melsec Q-q03udecpu Firmware Melsec Q-q03udvcpu Melsec Q-q03udvcpu Firmware Melsec Q-q04udehcpu Melsec Q-q04udehcpu Firmware Melsec Q-q04udpvcpu Melsec Q-q04udpvcpu Firmware Melsec Q-q04udvcpu Melsec Q-q04udvcpu Firmware Melsec Q-q06udehcpu Melsec Q-q06udehcpu Firmware Melsec Q-q06udpvcpu Melsec Q-q06udpvcpu Firmware Melsec Q-q100udehcpu Melsec Q-q100udehcpu Firmware Melsec Q-q10udehcpu Melsec Q-q10udehcpu Firmware Melsec Q-q13udehcpu Melsec Q-q13udehcpu Firmware Melsec Q-q13udpvcpu Melsec Q-q13udpvcpu Firmware Melsec Q-q13udvcpu Melsec Q-q13udvcpu Firmware Melsec Q-q170mcpu Melsec Q-q170mcpu Firmware Melsec Q-q170mscpu-s1 Melsec Q-q170mscpu-s1 Firmware Melsec Q-q172dcpu-s1 Melsec Q-q172dcpu-s1 Firmware Melsec Q-q172dscpu Melsec Q-q172dscpu Firmware Melsec Q-q173dcpu-s1 Melsec Q-q173dcpu-s1 Firmware Melsec Q-q173dscpu Melsec Q-q173dscpu Firmware Melsec Q-q20udehcpu Melsec Q-q20udehcpu Firmware Melsec Q-q26udehcpu Melsec Q-q26udehcpu Firmware Melsec Q-q26udpvcpu Melsec Q-q26udpvcpu Firmware Melsec Q-q26udvcpu Melsec Q-q26udvcpu Firmware Melsec Q-q50udehcpu Melsec Q-q50udehcpu Firmware Melsec Q-qmr-mq100 Melsec Q-qmr-mq100 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Aug 4, 2024, 8:39 AM
Reserved
Jan 6, 2020, 12:00 AM
Status
Modified
Published
Nov 2, 2020, 9:15 PM
Modified
Jun 17, 2026, 3:21 AM