CVE-2020-5527

Katalog CVE

CVSS 7.5 · High EPSS 1,4%

Kerentanan Uncontrolled Resource Consumption pada mitsubishielectric cr800-q firmware, mitsubishielectric fx3g firmware +44 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.

Rincian

Terbit di NVD

30 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf advisory vendor
• https://jvn.jp/en/vu/JVNVU91553662/index.html advisory pihak ketiga