CVE-2020-5666

Katalog CVE

CVSS 7.5 · High EPSS 8,8%

Kerentanan Uncontrolled Resource Consumption pada mitsubishielectric melsec iq-r00 firmware, mitsubishielectric melsec iq-r01 firmware +6 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') allows a remote attacker to cause an error in a CPU unit via a specially crafted HTTP packet, which may lead to a denial-of-service (DoS) condition in execution of the program and its communication.

Rincian

Terbit di NVD

16 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

8,8% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-015_en.pdf mitigasi · advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-20-317-01 advisory pihak ketiga · pemerintah AS
• https://jvn.jp/en/jp/JVN44764844/index.html advisory pihak ketiga
• https://jvn.jp/jp/JVN44764844/index.html advisory pihak ketiga