Vulnerability Details CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service (DoS) condition on program execution and communication by sending a specially crafted ARP packet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.0%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 3.3
References
- https://jvn.jp/vu/JVNVU95638588/index.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf
- https://jvn.jp/vu/JVNVU95638588/index.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf
Products affected by CVE-2020-5665
-
cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5u_cpu:-
-
cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5u_cpu_firmware:-
-
cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5u_cpu_firmware:1.060