Fiche vulnérabilité
CVE-2020-5527 : faille élevée mitsubishielectric cr800-q firmware (CVSS 7.5)
Description
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
En bref
- Sévérité
- Élevée (CVSS 7.5)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 30 mars 2020
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- mitsubishielectric cr800-q firmware
- mitsubishielectric fx3g firmware
- mitsubishielectric fx3gc firmware
- mitsubishielectric fx3s firmware
- mitsubishielectric fx3u firmware
- mitsubishielectric fx3uc firmware
- mitsubishielectric fx5u firmware
- mitsubishielectric fx5uc firmware
- mitsubishielectric fx5uj firmware
- mitsubishielectric l02cpu firmware
- mitsubishielectric l02cpu-p firmware
- mitsubishielectric l02scpu firmware
- mitsubishielectric l02scpu-p firmware
- mitsubishielectric l06cpu firmware
- mitsubishielectric l06cpu-p firmware
- mitsubishielectric l26cpu firmware
- mitsubishielectric l26cpu-bt firmware
- mitsubishielectric l26cpu-p firmware
- mitsubishielectric l26cpu-pbt firmware
- mitsubishielectric q02phcpu firmware