Vulnerability Details CVE-2020-5666
Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') allows a remote attacker to cause an error in a CPU unit via a specially crafted HTTP packet, which may lead to a denial-of-service (DoS) condition in execution of the program and its communication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.144
EPSS Ranking 94.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.1
Products affected by CVE-2020-5666
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r00:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r01:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r02:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r04:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r08:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r120:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r16:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-r32:-
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r00_firmware:05
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r00_firmware:19
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r01_firmware:05
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r01_firmware:19
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r02_firmware:05
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r02_firmware:19
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r04_firmware:35
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r04_firmware:51
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r08_firmware:35
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r08_firmware:51
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r120_firmware:35
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r120_firmware:51
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r16_firmware:35
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r16_firmware:51
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r32_firmware:35
-
cpe:2.3:o:mitsubishielectric:melsec_iq-r32_firmware:51