Vulnerability · Published Dec 14, 2020 · Assigned by jpcert
CVE-2020-5665
High 7.4
In plain English
A high-severity security flaw in MELSEC iQ-F series FX5U(C) CPU unit from Mitsubishi Electric Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS NVD)7.4High
Exploit odds (30 days)1.0%top 36.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service (DoS) condition on program execution and communication by sending a specially crafted ARP packet.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishi Electric Corporation | MELSEC iQ-F series FX5U(C) CPU unit | firmware version 1.060 and earlier |
References
- https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01 x_refsource_MISC
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf x_refsource_MISC
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf x_refsource_MISC
- https://jvn.jp/vu/JVNVU95638588/index.html x_refsource_MISC