CVE-2020-5668

Published: Nov 20, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU firmware version '06' and earlier, RJ71EN71 firmware version '47' and earlier, RJ71GF11-T2 firmware version '47' and earlier, RJ72GF15-T2 firmware version '07' and earlier, RJ71GP21-SX firmware version '47' and earlier, RJ71GP21S-SX firmware version '47' and earlier, and RJ71GN11-T2 firmware version '11' and earlier) allows a remote unauthenticated attacker to cause an error in a CPU unit and cause a denial-of-service (DoS) condition in execution of the program and its communication, or to cause a denial-of-service (DoS) condition in communication via the unit by receiving a specially crafted SLMP packet

Affected (28)

Products: Mitsubishielectric: R00cpu Firmware, R01cpu Firmware, R02cpu Firmware, R04cpu Firmware, R08cpu Firmware, R16cpu Firmware, R32cpu Firmware, R120cpu Firmware, R08sfcpu Firmware, R16sfcpu Firmware, R32sfcpu Firmware, R120sfcpu Firmware, R08pcpu Firmware, R16pcpu Firmware, R32pcpu Firmware, R120pcpu Firmware, R08psfcpu Firmware, R16psfcpu Firmware, R32psfcpu Firmware, R120psfcpu Firmware, Rj71en71 Firmware, Rj71gf11 T2 Firmware, Rj72gf15 T2 Firmware, Rj71gp21 Sx Firmware, Rj71gp21s Sx Firmware, Rj71c24 R2 Firmware, Rj71c24 R4 Firmware, Rj71gn11 T2 Firmware

28 products

Rj71gp21s Sx Firmware

Rj71c24 R2 Firmware

Rj71c24 R4 Firmware

Rj71gn11 T2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R00cpu Firmware	Up to 19

Running on/with	Platform Versions
Mitsubishielectric R00cpu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R01cpu Firmware	Up to 19

Running on/with	Platform Versions
Mitsubishielectric R01cpu	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R02cpu Firmware	Up to 19

Running on/with	Platform Versions
Mitsubishielectric R02cpu	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R04cpu Firmware	Up to 51

Running on/with	Platform Versions
Mitsubishielectric R04cpu	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R08cpu Firmware	Up to 51

Running on/with	Platform Versions
Mitsubishielectric R08cpu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R16cpu Firmware	Up to 51

Running on/with	Platform Versions
Mitsubishielectric R16cpu	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R32cpu Firmware	Up to 51

Running on/with	Platform Versions
Mitsubishielectric R32cpu	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R120cpu Firmware	Up to 51

Running on/with	Platform Versions
Mitsubishielectric R120cpu	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R08sfcpu Firmware	Up to 22

Running on/with	Platform Versions
Mitsubishielectric R08sfcpu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R16sfcpu Firmware	Up to 22

Running on/with	Platform Versions
Mitsubishielectric R16sfcpu	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R32sfcpu Firmware	Up to 22

Running on/with	Platform Versions
Mitsubishielectric R32sfcpu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R120sfcpu Firmware	Up to 22

Running on/with	Platform Versions
Mitsubishielectric R120sfcpu	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R08pcpu Firmware	Up to 25

Running on/with	Platform Versions
Mitsubishielectric R08pcpu	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R16pcpu Firmware	Up to 25

Running on/with	Platform Versions
Mitsubishielectric R16pcpu	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R32pcpu Firmware	Up to 25

Running on/with	Platform Versions
Mitsubishielectric R32pcpu	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R120pcpu Firmware	Up to 25

Running on/with	Platform Versions
Mitsubishielectric R120pcpu	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R08psfcpu Firmware	Up to 06

Running on/with	Platform Versions
Mitsubishielectric R08psfcpu	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R16psfcpu Firmware	Up to 06

Running on/with	Platform Versions
Mitsubishielectric R16psfcpu	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R32psfcpu Firmware	Up to 06

Running on/with	Platform Versions
Mitsubishielectric R32psfcpu	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric R120psfcpu Firmware	Up to 06

Running on/with	Platform Versions
Mitsubishielectric R120psfcpu	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71en71 Firmware	Up to 47

Running on/with	Platform Versions
Mitsubishielectric Rj71en71	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71gf11 T2 Firmware	Up to 47

Running on/with	Platform Versions
Mitsubishielectric Rj71gf11 T2	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj72gf15 T2 Firmware	Up to 07

Running on/with	Platform Versions
Mitsubishielectric Rj72gf15 T2	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71gp21 Sx Firmware	Up to 47

Running on/with	Platform Versions
Mitsubishielectric Rj71gp21 Sx	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71gp21s Sx Firmware	Up to 47

Running on/with	Platform Versions
Mitsubishielectric Rj71gp21s Sx	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71c24 R2 Firmware	Up to 47

Running on/with	Platform Versions
Mitsubishielectric Rj71c24 R2	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71c24 R4 Firmware	Up to 47

Running on/with	Platform Versions
Mitsubishielectric Rj71c24 R4	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Rj71gn11 T2 Firmware	Up to 11

Running on/with	Platform Versions
Mitsubishielectric Rj71gn11 T2	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (8)

https://jvn.jp/vu/JVNVU95980140/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05

Source: vultures@jpcert.or.jp

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdf

Source: vultures@jpcert.or.jp

Vendor Advisory

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdf

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU95980140/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.