CVE-2019-6535
First published: Tue Jan 29 2019(Updated: )
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mitsubishielectric Q03udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q03udvcpu | ||
| Mitsubishielectric Q04udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q04udvcpu | ||
| Mitsubishielectric Q06udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q06udvcpu | ||
| Mitsubishielectric Q13udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q13udvcpu | ||
| Mitsubishielectric Q26udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q26udvcpu | ||
| Mitsubishielectric Q04udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q04udpvcpu | ||
| Mitsubishielectric Q06udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q06udpvcpu | ||
| Mitsubishielectric Q13udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q13udpvcpu | ||
| Mitsubishielectric Q26udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q26udpvcpu | ||
| Mitsubishielectric Q03udecpu Firmware | <=20101 | |
| Mitsubishielectric Q03udecpu | ||
| Mitsubishielectric Q04udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q04udehcpu | ||
| Mitsubishielectric Q06udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q06udehcpu | ||
| Mitsubishielectric Q10udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q10udehcpu | ||
| Mitsubishielectric Q13udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q13udehcpu | ||
| Mitsubishielectric Q20udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q20udehcpu | ||
| Mitsubishielectric Q26udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q26udehcpu | ||
| Mitsubishielectric Q50udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q50udehcpu | ||
| Mitsubishielectric Q100udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q100udehcpu | ||
| All of | ||
| Mitsubishielectric Q03udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q03udvcpu | ||
| All of | ||
| Mitsubishielectric Q04udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q04udvcpu | ||
| All of | ||
| Mitsubishielectric Q06udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q06udvcpu | ||
| All of | ||
| Mitsubishielectric Q13udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q13udvcpu | ||
| All of | ||
| Mitsubishielectric Q26udvcpu Firmware | <=20081 | |
| Mitsubishielectric Q26udvcpu | ||
| All of | ||
| Mitsubishielectric Q04udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q04udpvcpu | ||
| All of | ||
| Mitsubishielectric Q06udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q06udpvcpu | ||
| All of | ||
| Mitsubishielectric Q13udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q13udpvcpu | ||
| All of | ||
| Mitsubishielectric Q26udpvcpu Firmware | <=20081 | |
| Mitsubishielectric Q26udpvcpu | ||
| All of | ||
| Mitsubishielectric Q03udecpu Firmware | <=20101 | |
| Mitsubishielectric Q03udecpu | ||
| All of | ||
| Mitsubishielectric Q04udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q04udehcpu | ||
| All of | ||
| Mitsubishielectric Q06udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q06udehcpu | ||
| All of | ||
| Mitsubishielectric Q10udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q10udehcpu | ||
| All of | ||
| Mitsubishielectric Q13udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q13udehcpu | ||
| All of | ||
| Mitsubishielectric Q20udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q20udehcpu | ||
| All of | ||
| Mitsubishielectric Q26udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q26udehcpu | ||
| All of | ||
| Mitsubishielectric Q50udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q50udehcpu | ||
| All of | ||
| Mitsubishielectric Q100udehcpu Firmware | <=20101 | |
| Mitsubishielectric Q100udehcpu |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Mitsubishi Electric vulnerability?
The vulnerability ID for this Mitsubishi Electric vulnerability is CVE-2019-6535.
What is the severity level of CVE-2019-6535?
CVE-2019-6535 has a severity level of 7.5 (high).
Which software versions are affected by CVE-2019-6535?
The affected software versions for CVE-2019-6535 are Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, Q03UDECPU, and Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior.
How can a remote attacker exploit CVE-2019-6535?
A remote attacker can exploit CVE-2019-6535 by sending specific bytes over Port 5007, which results in an Ethernet stack vulnerability.
Where can I find more information about CVE-2019-6535?
You can find more information about CVE-2019-6535 on the following websites: securityfocus.com and ics-cert.us-cert.gov.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/mitsubishielectric
- canonical/mitsubishielectric q03udvcpu firmware
- version/mitsubishielectric q03udvcpu firmware/20081
- canonical/mitsubishielectric q03udvcpu
- canonical/mitsubishielectric q04udvcpu firmware
- version/mitsubishielectric q04udvcpu firmware/20081
- canonical/mitsubishielectric q04udvcpu
- canonical/mitsubishielectric q06udvcpu firmware
- version/mitsubishielectric q06udvcpu firmware/20081
- canonical/mitsubishielectric q06udvcpu
- canonical/mitsubishielectric q13udvcpu firmware
- version/mitsubishielectric q13udvcpu firmware/20081
- canonical/mitsubishielectric q13udvcpu
- canonical/mitsubishielectric q26udvcpu firmware
- version/mitsubishielectric q26udvcpu firmware/20081
- canonical/mitsubishielectric q26udvcpu
- canonical/mitsubishielectric q04udpvcpu firmware
- version/mitsubishielectric q04udpvcpu firmware/20081
- canonical/mitsubishielectric q04udpvcpu
- canonical/mitsubishielectric q06udpvcpu firmware
- version/mitsubishielectric q06udpvcpu firmware/20081
- canonical/mitsubishielectric q06udpvcpu
- canonical/mitsubishielectric q13udpvcpu firmware
- version/mitsubishielectric q13udpvcpu firmware/20081
- canonical/mitsubishielectric q13udpvcpu
- canonical/mitsubishielectric q26udpvcpu firmware
- version/mitsubishielectric q26udpvcpu firmware/20081
- canonical/mitsubishielectric q26udpvcpu
- canonical/mitsubishielectric q03udecpu firmware
- version/mitsubishielectric q03udecpu firmware/20101
- canonical/mitsubishielectric q03udecpu
- canonical/mitsubishielectric q04udehcpu firmware
- version/mitsubishielectric q04udehcpu firmware/20101
- canonical/mitsubishielectric q04udehcpu
- canonical/mitsubishielectric q06udehcpu firmware
- version/mitsubishielectric q06udehcpu firmware/20101
- canonical/mitsubishielectric q06udehcpu
- canonical/mitsubishielectric q10udehcpu firmware
- version/mitsubishielectric q10udehcpu firmware/20101
- canonical/mitsubishielectric q10udehcpu
- canonical/mitsubishielectric q13udehcpu firmware
- version/mitsubishielectric q13udehcpu firmware/20101
- canonical/mitsubishielectric q13udehcpu
- canonical/mitsubishielectric q20udehcpu firmware
- version/mitsubishielectric q20udehcpu firmware/20101
- canonical/mitsubishielectric q20udehcpu
- canonical/mitsubishielectric q26udehcpu firmware
- version/mitsubishielectric q26udehcpu firmware/20101
- canonical/mitsubishielectric q26udehcpu
- canonical/mitsubishielectric q50udehcpu firmware
- version/mitsubishielectric q50udehcpu firmware/20101
- canonical/mitsubishielectric q50udehcpu
- canonical/mitsubishielectric q100udehcpu firmware
- version/mitsubishielectric q100udehcpu firmware/20101
- canonical/mitsubishielectric q100udehcpu