CVE-2020-5527

Published: Mar 30, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.

Affected (46)

Products: Mitsubishielectric: Cr800 Q Firmware, Fx3g Firmware, Fx3gc Firmware, Fx3s Firmware, Fx3u Firmware, Fx3uc Firmware, Fx5u Firmware, Fx5uc Firmware, Fx5uj Firmware, L02cpu Firmware, L02cpu P Firmware, L02scpu Firmware, L02scpu P Firmware, L06cpu Firmware, L06cpu P Firmware, L26cpu Firmware, L26cpu Bt Firmware, L26cpu P Firmware, L26cpu Pbt Firmware, Q02phcpu Firmware, Q06phcpu Firmware, Q12dccpu V Firmware, Q12phcpu Firmware, Q12prhcpu Firmware, Q172dscpu Firmware, Q173dscpu Firmware, Q173nccpu Firmware, Q24dhccpu Ls Firmware, Q24dhccpu V Firmware, Q24dhccpu Vg2 Firmware, Q25phcpu Firmware, Q25prhcpu Firmware, Q26dhccpu Ls Firmware, R00cpu Firmware, R01cpu Firmware, R02cpu Firmware, R04cpu Firmware, R04encpu Firmware, R08cpu Firmware, R08encpu Firmware, R120cpu Firmware, R120encpu Firmware, R16cpu Firmware, R16encpu Firmware, R32cpu Firmware, R32encpu Firmware

46 products

Q24dhccpu Ls Firmware

Q24dhccpu V Firmware

Q24dhccpu Vg2 Firmware

Q25phcpu Firmware

Q25prhcpu Firmware

Q26dhccpu Ls Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Cr800 Q Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Cr800 Q	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx3g Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx3g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx3gc Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx3gc	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx3s Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx3s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx3u Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx3u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx3uc Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx3uc	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02cpu	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02cpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02cpu P	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02scpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02scpu	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02scpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02scpu P	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L06cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L06cpu	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L06cpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L06cpu P	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Bt Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu Bt	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu P	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Pbt Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu Pbt	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q02phcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q02phcpu	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06phcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q06phcpu	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q12dccpu V Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q12dccpu V	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q12phcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q12phcpu	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q12prhcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q12prhcpu	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q172dscpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q172dscpu	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q173dscpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q173dscpu	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q173nccpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q173nccpu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q24dhccpu Ls Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q24dhccpu Ls	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q24dhccpu V Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q24dhccpu V	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q24dhccpu Vg2 Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q24dhccpu Vg2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q25phcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q25phcpu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q25prhcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q25prhcpu	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26dhccpu Ls Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q26dhccpu Ls	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R00cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R00cpu	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R01cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R01cpu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R02cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R02cpu	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R04cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R04cpu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R04encpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R04encpu	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R08cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R08cpu	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R08encpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R08encpu	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R120cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R120cpu	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R120encpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R120encpu	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R16cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R16cpu	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R16encpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R16encpu	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R32cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R32cpu	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R32encpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric R32encpu	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (4)

https://jvn.jp/en/vu/JVNVU91553662/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/vu/JVNVU91553662/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.