CVE-2020-5527
Summary
| CVE | CVE-2020-5527 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-03-30 08:15:00 UTC |
| Updated | 2020-04-07 13:49:00 UTC |
| Description | When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVNVU#91553662: Denial-of-service (DoS) vulnerability in Mitsubishi Electric MELSOFT transmission port | MISC | jvn.jp | Third Party Advisory |
| www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf | MISC | www.mitsubishielectric.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590627 Mitsubishi Electric MELSEC Denial of Service (DoS) Vulnerability (ICSA-20-091-02)