CVE-2020-16226
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
Affected (95)
Products: Mitsubishielectric: Qj71mes96 Firmware, Qj71ws96 Firmware, Q06ccpu V Firmware, Q24dhccpu V Firmware, Q24dhccpu Vg Firmware, R12ccpu V Firmware, Rd55up06 V Firmware, Rd55up12 V Firmware, Rj71gn11 T2 Firmware, Rj71en71 Firmware, Qj71e71 100 Firmware, Lj71e71 100 Firmware, Qj71mt91 Firmware, Rd78gn(n=4,8,16,32,64) Firmware, Rd78ghv Firmware, Rd78ghw Firmware, Nz2gacp620 60 Firmware, Nz2gacp620 300 Firmware, Nz2ft Mt Firmware, Nz2ft Eip Firmware, Q03udecpu Firmware, Qnudehcpu(n=04/06/10/13/20/26/50/100) Firmware, Qnudvcpu(n=03/04/06/13/26) Firmware, Qnudpvcpu(n=04/06/13/2) Firmware, Lncpu( P)(n=02/06/26) Firmware, L26cpu (p)bt Firmware, Rncpu(n=00/01/02)t Firmware, Rncpu(n=04/08/16/32/120) Firmware, Rnencpu(n=04/08/16/32/120) Firmware, Rnsfcpu (n=08/16/32/120) Firmware, Rnpcpu(n=08/16/32/120) Firmware, Rnpsfcpu(n=08/16/32/120) Firmware, Fx5uc 32mt/d Firmware, Fx5uc 32mt/dss Firmware, Fx5uc 32mt/ds Ts Firmware, Fx5uc 32mt/dss Ts Firmware, Fx5uj 24mr/es Firmware, Fx5uc 32mr/ds Ts Firmware, Fx5uj 24mt/es Firmware, Fx5uj 24mt/ess Firmware, Fx5uj 40mr/es Firmware, Fx5uj 40mt/es Firmware, Fx5uj 40mt/ess Firmware, Fx5uj 60mr/es Firmware, Fx5uj 60mt/es Firmware, Fx5uj 60mt/ess Firmware, Fx5 Enet Firmware, Fx5 Enet/ip Firmware, Fx5 Enet Adp Firmware, Fx3g 14mr/es Firmware, Fx3g 14mt/ess Firmware, Fx3g 14mr/ds Firmware, Fx3g 14mt/dss Firmware, Fx3g 60mr/es Firmware, Fx3g 60mt/ess Firmware, Fx3g 60mr/ds Firmware, Fx3g 60mt/dss Firmware, Fx3g 24mr/es Firmware, Fx3g 24mt/ess Firmware, Fx3g 24mr/ds Firmware, Fx3g 24mt/dss Firmware, Fx3g 40mr/es Firmware, Fx3g 40mt/ess Firmware, Fx3g 40mr/ds Firmware, Fx3g 40mt/dss Firmware, Fx3g 32 Mt/dss Firmware, Fx3u Enet Firmware, Fx3u Enet L Firmware, Fx3u Enet P502 Firmware, Fx5 Cclgn Ms Firmware, Iu1 1m20 D Firmware, Le7 40gu L Firmware, Got2000 Series Gt21 Firmware, Got Simple Series Gs21 Firmware, Got1000 Series Gt14 Firmware, Gt25 J71gn13 T2 Firmware, Fr A820 E Firmware, Fr A840 E Firmware, Fr A860 E Firmware, Fr A842 E Firmware, Fr A862 E Firmware, Fr F820 E Firmware, Fr F840 E Firmware, Fr F860 E Firmware, Fr F842 E Firmware, Fr F862 E Firmware, Fr A8ncge Firmware, Fr E800 Epa Firmware, Fr E800 Epb Firmware, Conveyor Tracking Application Apr Ntr12fh, Conveyor Tracking Application Apr Ntr20fh(n=1,2), Conveyor Tracking Application Apr Ntr3fh, Conveyor Tracking Application Apr Ntr6fh, Mr Je C Firmware, Mr J4 Tm Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qj71mes96 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qj71ws96 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Q06ccpu V | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Q24dhccpu V | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Q24dhccpu Vg | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric R12ccpu V | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rd55up06 V | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rd55up12 V | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rj71gn11 T2 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rj71en71 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qj71e71 100 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Lj71e71 100 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qj71mt91 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rd78gn(n=4,8,16,32,64) | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rd78ghv | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rd78ghw | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Nz2gacp620 60 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Nz2gacp620 300 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Nz2ft Mt | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Nz2ft Eip | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22081 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Q03udecpu | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22081 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qnudehcpu(n=04/06/10/13/20/26/50/100) | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22031 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qnudvcpu(n=03/04/06/13/26) | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22031 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Qnudpvcpu(n=04/06/13/2) | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22051 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Lncpu( P)(n=02/06/26) | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22051 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric L26cpu (p)bt | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 18 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rncpu(n=00/01/02)t | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 50 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rncpu(n=04/08/16/32/120) | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 50 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rnencpu(n=04/08/16/32/120) | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rnsfcpu (n=08/16/32/120) | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rnpcpu(n=08/16/32/120) | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Rnpsfcpu(n=08/16/32/120) | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.210 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uc 32mt/d | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.210 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uc 32mt/dss | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.210 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uc 32mt/ds Ts | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.210 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uc 32mt/dss Ts | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 24mr/es | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.210 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uc 32mr/ds Ts | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 24mt/es | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 24mt/ess | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 40mr/es | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 40mt/es | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 40mt/ess | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 60mr/es | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 60mt/es | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.000 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5uj 60mt/ess | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5 Enet | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5 Enet/ip | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5 Enet Adp | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 14mr/es | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 14mt/ess | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 14mr/ds | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 14mt/dss | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 60mr/es | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 60mt/ess | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 60mr/ds | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 60mt/dss | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 24mr/es | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 24mt/ess | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 24mr/ds | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 24mt/dss | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 40mr/es | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 40mt/ess | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 40mr/ds | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 40mt/dss | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3g 32 Mt/dss | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3u Enet | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3u Enet L | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx3u Enet P502 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fx5 Cclgn Ms | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Iu1 1m20 D | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Le7 40gu L | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Got2000 Series Gt21 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Got Simple Series Gs21 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Got1000 Series Gt14 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Gt25 J71gn13 T2 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr A820 E | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr A840 E | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr A860 E | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr A842 E | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr A862 E | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr F820 E | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr F840 E | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr F860 E | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr F842 E | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr F862 E | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2020-08 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr A8ncge | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2020-07 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr E800 Epa | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2020-07 |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Fr E800 Epb | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions | |
| All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Mr Je C | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Mitsubishielectric Mr J4 Tm | All versions |
References (2)
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.