CVE-2020-5594
Summary
| CVE | CVE-2020-5594 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-06-23 08:15:00 UTC |
| Updated | 2020-07-01 19:09:00 UTC |
| Description | Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors. |
Risk And Classification
Problem Types: CWE-319
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Mitsubishielectric | Melsec-fx | - | All | All | All |
| Hardware | Mitsubishielectric | Melsec-fx | - | All | All | All |
| Operating System | Mitsubishielectric | Melsec-fx Firmware | All | All | All | All |
| Operating System | Mitsubishielectric | Melsec-fx Firmware | All | All | All | All |
| Hardware | Mitsubishielectric | Melsec-l | - | All | All | All |
| Hardware | Mitsubishielectric | Melsec-l | - | All | All | All |
| Operating System | Mitsubishielectric | Melsec-l Firmware | All | All | All | All |
| Operating System | Mitsubishielectric | Melsec-l Firmware | All | All | All | All |
| Hardware | Mitsubishielectric | Melsec-q | - | All | All | All |
| Hardware | Mitsubishielectric | Melsec-q | - | All | All | All |
| Operating System | Mitsubishielectric | Melsec-q Firmware | All | All | All | All |
| Operating System | Mitsubishielectric | Melsec-q Firmware | All | All | All | All |
| Hardware | Mitsubishielectric | Melsec Iq-f | - | All | All | All |
| Hardware | Mitsubishielectric | Melsec Iq-f | - | All | All | All |
| Operating System | Mitsubishielectric | Melsec Iq-f Firmware | All | All | All | All |
| Operating System | Mitsubishielectric | Melsec Iq-f Firmware | All | All | All | All |
| Hardware | Mitsubishielectric | Melsec Iq-r | - | All | All | All |
| Hardware | Mitsubishielectric | Melsec Iq-r | - | All | All | All |
| Operating System | Mitsubishielectric | Melsec Iq-r Firmware | All | All | All | All |
| Operating System | Mitsubishielectric | Melsec Iq-r Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-003_en.pdf | MISC | www.mitsubishielectric.com | Vendor Advisory |
| JVNVU#91424496: Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series vulnerable to cleartext transmission of sensitive information | MISC | jvn.jp | Third Party Advisory |
| www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-003.pdf | MISC | www.mitsubishielectric.co.jp | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590626 Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX Series CPU Modules (Update A) Uncontrolled Resource Consumption Vulnerability (ICSA-20-175-01)