{"containers": {"cna": {"affected": [{"product": "MELSEC iQ-R, Q and L series", "vendor": "Mitsubishi Electric Corporation", "versions": [{"status": "affected", "version": "R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier, Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, and L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition ."}], "problemTypes": [{"descriptions": [{"description": "Uncontrolled Resource Consumption", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-10-30T03:35:51", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf"}, {"tags": ["x_refsource_MISC"], "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf"}, {"tags": ["x_refsource_MISC"], "url": "https://jvn.jp/vu/JVNVU96558207/index.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2020-5652", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "MELSEC iQ-R, Q and L series", "version": {"version_data": [{"version_value": "R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier, Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, and L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions"}]}}]}, "vendor_name": "Mitsubishi Electric Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition ."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Uncontrolled Resource Consumption"}]}]}, "references": {"reference_data": [{"name": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf", "refsource": "MISC", "url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf"}, {"name": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf", "refsource": "MISC", "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf"}, {"name": "https://jvn.jp/vu/JVNVU96558207/index.html", "refsource": "MISC", "url": "https://jvn.jp/vu/JVNVU96558207/index.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T08:39:25.481Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jvn.jp/vu/JVNVU96558207/index.html"}]}]}, "cveMetadata": {"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2020-5652", "datePublished": "2020-10-30T03:35:51", "dateReserved": "2020-01-06T00:00:00", "dateUpdated": "2024-08-04T08:39:25.481Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q04udpvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "07764D6C-DE23-42DD-9BD7-6D3335A73FE8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q04udpvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "6ABBC132-C597-4475-B45C-4011585EE2B6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q06udpvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "C6EF6445-28AC-42EC-9BF0-8FD2210CD873", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q06udpvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAFCBC6E-55EC-400B-9326-7C0023E1FB92", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q13udpvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "A8724B38-7546-42A5-85EC-F3A4D6560BC7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q13udpvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "793FB504-4FEB-4F88-82D5-399B8B7969A6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q26udpvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "B168C00E-07B3-4806-AB9B-0915569E521D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q26udpvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E9D4080-CAE3-47B4-A1D9-47A228C586B8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q03udvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "C1A708A4-1C6E-4475-915F-EB0B3E24028A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q03udvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA363B56-D608-4765-8D7A-B18FF69AB120", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q04udvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "07DD5540-7BF0-40D5-AE69-D55D3468B554", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q04udvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E69938F-788B-4F45-A7B2-86D873BF2051", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q13udvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "763F5064-B0F7-4540-9D4D-94F2E0752DC8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q13udvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "7005C3DA-BB28-4F00-8F62-F9332A2B6CD4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q26udvcpu_firmware:22031:*:*:*:*:*:*:*", "matchCriteriaId": "63C7D103-05BF-4C82-A678-3FD8BC5CEFF4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q26udvcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "5E820CFB-FF06-4CAB-85BA-CB6A2BA05B6D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q03udecpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "BF7B01AE-6864-4F54-ACEE-F7419FE60DC6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q03udecpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "3788B04E-3987-4F19-A8ED-15FC2BA99F36", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q04udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "76F7ED79-DFB9-4534-8B66-9DD3B89EC262", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q04udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "2932AD40-6B88-46E6-A2D5-579DE1F75E39", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q06udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "405261B7-16B1-4165-8B7F-C6C7F57808E8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q06udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D92692D-5B77-420B-98A0-1FA558153C83", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q10udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "0EAA23D2-156B-4270-910A-40A31469CFC5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q10udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "3837F2EC-846A-4BB0-A5C6-A6B00E75FF2A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q13udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "4DC3884C-4247-49E3-AF85-034D3FDEF9EA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q13udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F633218-DE95-4E29-B877-3DD713A97D26", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q20udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "DCB4B54F-157B-458A-BFE3-A6C5F2ADFD88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q20udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "F052B6F4-C25F-491E-8807-7DAFE3DD2453", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q26udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "E7F41C68-C249-49F9-B371-43B1F73BDC83", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q26udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "9EBCC1D6-1D36-4539-8740-D41E9068F322", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q50udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "ED0D5EA6-9EF5-4C86-8123-F45E0C1BE308", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q50udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "1CB287CA-D4A2-491E-890C-4B499CACC354", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q100udehcpu_firmware:22081:*:*:*:*:*:*:*", "matchCriteriaId": "097ADD05-88D3-4C73-BBFE-843EEA190CEE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q100udehcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "1683495C-9F6A-4B21-9898-47B2B1733576", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r08sfcpu_firmware:22:*:*:*:*:*:*:*", "matchCriteriaId": "10C8015B-DBDB-4912-80EF-E7328F96D946", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r08sfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "E0B4379A-F1D2-4B93-8D0C-EF11A2A8D4F4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r16sfcpu_firmware:22:*:*:*:*:*:*:*", "matchCriteriaId": "EEB6C61C-6AA3-49FE-B9B8-1D5439D4118D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r16sfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B74D4E6-FCB2-4E6D-ADB5-81D24083F927", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r32sfcpu_firmware:22:*:*:*:*:*:*:*", "matchCriteriaId": "A3D8AC29-04C1-4F2B-A09F-9C79683D1A23", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r32sfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "C1CFCCAD-84CE-44EC-889D-8826095CB7A0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r120sfcpu_firmware:22:*:*:*:*:*:*:*", "matchCriteriaId": "4CF2EACE-60D1-400A-8910-840D7B52E16A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r120sfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "9460791F-7EA8-49C2-A45C-094BE209A453", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r04encpu_firmware:52:*:*:*:*:*:*:*", "matchCriteriaId": "277EBCD6-825A-4F51-9506-8AA222AAA94A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r04encpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D7A8E28-199B-4C0F-A092-27F82BD4F4E6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r08encpu_firmware:52:*:*:*:*:*:*:*", "matchCriteriaId": "2FD27A53-27B6-420B-BCFD-64F674584FF6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r08encpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAD66CD1-D7C6-4CB8-A79A-EC3F1116986E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r16encpu_firmware:52:*:*:*:*:*:*:*", "matchCriteriaId": "C3F1CB18-53C6-4DB4-B499-AF135C36B456", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r16encpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "C947D300-5A04-44D2-9CEA-CB36AA7054EF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r32encpu_firmware:52:*:*:*:*:*:*:*", "matchCriteriaId": "7F3E33BD-8E3F-4CB5-9082-8E217613AAA9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r32encpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD50753-8EA2-4EE4-ABA0-0EE146493209", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r120encpu_firmware:52:*:*:*:*:*:*:*", "matchCriteriaId": "DE7C60B1-A4D7-486B-BB8F-DCC58D8CF361", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r120encpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "62D6C973-77EE-4B5B-8FE5-47879CD5344E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r00cpu_firmware:20:*:*:*:*:*:*:*", "matchCriteriaId": "C0EC727E-E04D-4277-9131-9A42FF608EC5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r00cpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "2691265A-CC4F-4EF5-A987-FF90DFE40100", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r01cpu_firmware:20:*:*:*:*:*:*:*", "matchCriteriaId": "CF59B02D-DF73-461A-801D-4998013FA949", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r01cpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6BC3087-D96A-4327-A3A1-AF62DE145CD2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r02cpu_firmware:20:*:*:*:*:*:*:*", "matchCriteriaId": "07FD7CCE-4870-4AA5-AB0B-399C3A143184", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r02cpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "E39BA6C6-B3A1-4193-BE96-AD6E8CA8BB9F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r08pcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "04CC2966-E0CC-46F4-B751-E06294893158", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r08pcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "5E7CE305-8DC2-438D-826B-394C7CEEF8FF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r08psfcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B40D8B05-77B2-4DE6-B451-084DEC2A30DD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r08psfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "7279A86F-265F-42D3-A1D5-4A42B2A91EC9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r120pcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "274DD9C5-F238-4093-B536-D74E7B1655A2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r120pcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "3954D5FE-7D68-429D-9882-0C035832AE15", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r120psfcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A78A9FDC-6279-42B7-8956-95221BCCD74B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r120psfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "62176A5C-6A59-4D9A-808D-98A9C1637365", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r16mtcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B75AF53-131F-464B-91EC-24E142B8582D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r16mtcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "938B090A-C09C-4CC4-B884-369BD4D6209D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r16pcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2114776B-5D6F-4BF5-BA15-6F380EA6E221", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r16pcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "128886F3-1CB2-4615-9725-1E0A22B9CD1C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r16psfcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0952C09-80BD-424D-9519-4B4D809272BB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r16psfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "D77C67C8-2AD3-46E5-BF7B-A021BBF9168E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r32mtcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A24B3C8A-C65A-4D31-B745-737A116EF43A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r32mtcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "5054240E-4C87-41C5-8675-A8F4F00C884E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r32pcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFA0F135-65FC-4FB6-8194-0CFA3605F768", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r32pcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "8560DB92-7D50-4D19-8520-0ADBC32259CD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r32psfcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "13000EBB-3D2A-4FF1-BD54-7524803A8A70", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r32psfcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "B0AA864F-DCBA-4CDD-B9C8-2CE81A123D17", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_iq-r64mtcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A082A78-D2B1-4923-897F-9C1E3C4FDCB9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_iq-r64mtcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "AAE3714D-CCFB-4AFF-9866-3B88825F64C7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_l02cpu-p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FDA5D3E7-1479-4808-B761-F6FC9D01FE93", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_l02cpu-p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CF8C51BA-047B-49BB-AEB3-01F44269ED74", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_l06cpu-p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1F8A5B3D-D40E-4062-9501-1D6F46C4F1B6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_l06cpu-p:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB68BDCC-8428-480D-9DE9-A91E9DC28A5D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_l26cpu-p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2430525-0564-4063-A77B-071A4046F43C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_l26cpu-p:-:*:*:*:*:*:*:*", "matchCriteriaId": "62053076-18C2-4269-9B92-99FBFB5093F5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_l26cpu-pbt_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C07FF0C-E9E4-451B-8E92-8C6F20FBEDEF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_l26cpu-pbt:-:*:*:*:*:*:*:*", "matchCriteriaId": "96B77EE9-48CF-4A80-B98E-8B268D431F84", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q170mcpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "58AB0163-2ADD-43AE-8C7D-6ED9622BB42B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q170mcpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "34F75FF3-E046-438D-AEA3-C0ACD1E2509D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q170mscpu-s1_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "37C8847D-725A-4FA1-9C80-94B414A03D87", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q170mscpu-s1:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3BF6D96-E753-40A2-BFA9-66E52760E730", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q172dcpu-s1_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E788201C-5942-4C06-B9F9-AF0B89AB6C9F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q172dcpu-s1:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FA8711D-FC73-42CA-822C-7B027304B138", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q172dscpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FFF33FD-94BE-4043-8BD4-7D904F2AD2D2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q172dscpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "F86C564E-4C78-424D-A82B-BABCCE9831D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q173dcpu-s1_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "550F6FCE-8FA3-4AE1-A502-A461AB041B28", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q173dcpu-s1:-:*:*:*:*:*:*:*", "matchCriteriaId": "6CD3AAF1-0874-4F1E-9103-55733CCA4B3B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-q173dscpu_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCCC7B71-0143-4676-A40C-DD013F8EEC9D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-q173dscpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A1CAB52-49BC-4DC2-992B-FA3F42821D84", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mitsubishielectric:melsec_q-qmr-mq100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8735B7E6-2B0E-402B-AD6C-20BA40BF33C8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mitsubishielectric:melsec_q-qmr-mq100:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7408CD2-4805-4700-AE8C-1E8EE103B8E5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition ."}, {"lang": "es", "value": "Vulnerabilidad de consumo de recursos incontrolado en el Puerto Ethernet en m\u00f3dulos de CPU de las series MELSEC iQ-R, Q y L (versiones de firmware \"20\" y anteriores de CPU R 00/01/02, versiones firmware \"52\" y anteriores de CPU R 04/08/16/32/120 (EN), versiones de firmware \"22\" y anteriores de SFCPU R 08/16/32/120, todas las versiones de PCPU R 08/16/32/120, todas las versiones de PSFCPU R 08/16/32/120, todas las versiones MTCPU R 16/32/64, UDECPU Q03, n\u00famero de serie \"22081\" y anterior de UDEHCPU Q 04/06/10/13/20/26/50/100, n\u00famero de serie \"22031\" y anteriores de UDVCPU Q 03/04/06/13/26, n\u00famero de serie \"22031\" y anteriores de UDPVCPU Q 04/06/13/26, todas las versiones de DCPU Q 172/173, todas las versiones de DSCPU Q 172/173, todas las versiones MCPU Q 170, todas las versiones de MSCPU Q 170,L 02/06/26 CPU (-P) y L 26 CPU - (P) BT todas las versiones), permite a un atacante remoto no autenticado detener las funciones de comunicaci\u00f3n Ethernet de los productos por medio de un paquete especialmente dise\u00f1ado, lo que puede conducir a la condici\u00f3n denegaci\u00f3n de servicio (DoS)"}], "id": "CVE-2020-5652", "lastModified": "2024-11-21T05:34:25.693", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-11-02T21:15:33.697", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/vu/JVNVU96558207/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/vu/JVNVU96558207/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}