CVE-2020-5527: High severity Mitsubishielectric Cr800-q Firmware vulnerability
Published Mar 30, 2020
·Updated
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
Affected Software
184 affected components
Mitsubishielectric Cr800-q Firmware
Mitsubishielectric Cr800-q
Mitsubishielectric Fx3g Firmware
Mitsubishielectric Fx3g
Mitsubishielectric Fx3gc Firmware
Mitsubishielectric Fx3gc
Mitsubishielectric Fx3s Firmware
Mitsubishielectric Fx3s
Mitsubishielectric Fx3u Firmware
Mitsubishielectric Fx3u
Mitsubishielectric Fx3uc Firmware
Mitsubishielectric Fx3uc
Mitsubishielectric Fx5u Firmware
Mitsubishielectric Fx5u
Mitsubishielectric Fx5uc Firmware
Mitsubishielectric Fx5uc
Mitsubishielectric Fx5uj Firmware
Mitsubishielectric Fx5uj
Mitsubishielectric L02cpu Firmware
Mitsubishielectric L02cpu
Mitsubishielectric L02cpu-p Firmware
Mitsubishielectric L02cpu-p
Mitsubishielectric L02scpu Firmware
Mitsubishielectric L02scpu
Mitsubishielectric L02scpu-p Firmware
Mitsubishielectric L02scpu-p
Mitsubishielectric L06cpu Firmware
Mitsubishielectric L06cpu
Mitsubishielectric L06cpu-p Firmware
Mitsubishielectric L06cpu-p
Mitsubishielectric L26cpu Firmware
Mitsubishielectric L26cpu
Mitsubishielectric L26cpu-bt Firmware
Mitsubishielectric L26cpu-bt
Mitsubishielectric L26cpu-p Firmware
Mitsubishielectric L26cpu-p
Mitsubishielectric L26cpu-pbt Firmware
Mitsubishielectric L26cpu-pbt
Mitsubishielectric Q02phcpu Firmware
Mitsubishielectric Q02phcpu
Mitsubishielectric Q06phcpu Firmware
Mitsubishielectric Q06phcpu
Mitsubishielectric Q12dccpu-v Firmware
Mitsubishielectric Q12dccpu-v
Mitsubishielectric Q12phcpu Firmware
Mitsubishielectric Q12phcpu
Mitsubishielectric Q12prhcpu Firmware
Mitsubishielectric Q12prhcpu
Mitsubishielectric Q172dscpu Firmware
Mitsubishielectric Q172dscpu
Mitsubishielectric Q173dscpu Firmware
Mitsubishielectric Q173dscpu
Mitsubishielectric Q173nccpu Firmware
Mitsubishielectric Q173nccpu
Mitsubishielectric Q24dhccpu-ls Firmware
Mitsubishielectric Q24dhccpu-ls
Mitsubishielectric Q24dhccpu-v Firmware
Mitsubishielectric Q24dhccpu-v
Mitsubishielectric Q24dhccpu-vg2 Firmware
Mitsubishielectric Q24dhccpu-vg2
Mitsubishielectric Q25phcpu Firmware
Mitsubishielectric Q25phcpu
Mitsubishielectric Q25prhcpu Firmware
Mitsubishielectric Q25prhcpu
Mitsubishielectric Q26dhccpu-ls Firmware
Mitsubishielectric Q26dhccpu-ls
Mitsubishielectric R00cpu Firmware
Mitsubishielectric R00cpu
Mitsubishielectric R01cpu Firmware
Mitsubishielectric R01cpu
Mitsubishielectric R02cpu Firmware
Mitsubishielectric R02cpu
Mitsubishielectric R04cpu Firmware
Mitsubishielectric R04cpu
Mitsubishielectric R04encpu Firmware
Mitsubishielectric R04encpu
Mitsubishielectric R08cpu Firmware
Mitsubishielectric R08cpu
Mitsubishielectric R08encpu Firmware
Mitsubishielectric R08encpu
Mitsubishielectric R120cpu Firmware
Mitsubishielectric R120cpu
Mitsubishielectric R120encpu Firmware
Mitsubishielectric R120encpu
Mitsubishielectric R16cpu Firmware
Mitsubishielectric R16cpu
Mitsubishielectric R16encpu Firmware
Mitsubishielectric R16encpu
Mitsubishielectric R32cpu Firmware
Mitsubishielectric R32cpu
Mitsubishielectric R32encpu Firmware
Mitsubishielectric R32encpu
All of the following
Mitsubishielectric Cr800-q Firmware
Mitsubishielectric Cr800-q
All of the following
Mitsubishielectric Fx3g Firmware
Mitsubishielectric Fx3g
All of the following
Mitsubishielectric Fx3gc Firmware
Mitsubishielectric Fx3gc
All of the following
Mitsubishielectric Fx3s Firmware
Mitsubishielectric Fx3s
All of the following
Mitsubishielectric Fx3u Firmware
Mitsubishielectric Fx3u
All of the following
Mitsubishielectric Fx3uc Firmware
Mitsubishielectric Fx3uc
All of the following
Mitsubishielectric Fx5u Firmware
Mitsubishielectric Fx5u
All of the following
Mitsubishielectric Fx5uc Firmware
Mitsubishielectric Fx5uc
All of the following
Mitsubishielectric Fx5uj Firmware
Mitsubishielectric Fx5uj
All of the following
Mitsubishielectric L02cpu Firmware
Mitsubishielectric L02cpu
All of the following
Mitsubishielectric L02cpu-p Firmware
Mitsubishielectric L02cpu-p
All of the following
Mitsubishielectric L02scpu Firmware
Mitsubishielectric L02scpu
All of the following
Mitsubishielectric L02scpu-p Firmware
Mitsubishielectric L02scpu-p
All of the following
Mitsubishielectric L06cpu Firmware
Mitsubishielectric L06cpu
All of the following
Mitsubishielectric L06cpu-p Firmware
Mitsubishielectric L06cpu-p
All of the following
Mitsubishielectric L26cpu Firmware
Mitsubishielectric L26cpu
All of the following
Mitsubishielectric L26cpu-bt Firmware
Mitsubishielectric L26cpu-bt
All of the following
Mitsubishielectric L26cpu-p Firmware
Mitsubishielectric L26cpu-p
All of the following
Mitsubishielectric L26cpu-pbt Firmware
Mitsubishielectric L26cpu-pbt
All of the following
Mitsubishielectric Q02phcpu Firmware
Mitsubishielectric Q02phcpu
All of the following
Mitsubishielectric Q06phcpu Firmware
Mitsubishielectric Q06phcpu
All of the following
Mitsubishielectric Q12dccpu-v Firmware
Mitsubishielectric Q12dccpu-v
All of the following
Mitsubishielectric Q12phcpu Firmware
Mitsubishielectric Q12phcpu
All of the following
Mitsubishielectric Q12prhcpu Firmware
Mitsubishielectric Q12prhcpu
All of the following
Mitsubishielectric Q172dscpu Firmware
Mitsubishielectric Q172dscpu
All of the following
Mitsubishielectric Q173dscpu Firmware
Mitsubishielectric Q173dscpu
All of the following
Mitsubishielectric Q173nccpu Firmware
Mitsubishielectric Q173nccpu
All of the following
Mitsubishielectric Q24dhccpu-ls Firmware
Mitsubishielectric Q24dhccpu-ls
All of the following
Mitsubishielectric Q24dhccpu-v Firmware
Mitsubishielectric Q24dhccpu-v
All of the following
Mitsubishielectric Q24dhccpu-vg2 Firmware
Mitsubishielectric Q24dhccpu-vg2
All of the following
Mitsubishielectric Q25phcpu Firmware
Mitsubishielectric Q25phcpu
All of the following
Mitsubishielectric Q25prhcpu Firmware
Mitsubishielectric Q25prhcpu
All of the following
Mitsubishielectric Q26dhccpu-ls Firmware
Mitsubishielectric Q26dhccpu-ls
All of the following
Mitsubishielectric R00cpu Firmware
Mitsubishielectric R00cpu
All of the following
Mitsubishielectric R01cpu Firmware
Mitsubishielectric R01cpu
All of the following
Mitsubishielectric R02cpu Firmware
Mitsubishielectric R02cpu
All of the following
Mitsubishielectric R04cpu Firmware
Mitsubishielectric R04cpu
All of the following
Mitsubishielectric R04encpu Firmware
Mitsubishielectric R04encpu
All of the following
Mitsubishielectric R08cpu Firmware
Mitsubishielectric R08cpu
All of the following
Mitsubishielectric R08encpu Firmware
Mitsubishielectric R08encpu
All of the following
Mitsubishielectric R120cpu Firmware
Mitsubishielectric R120cpu
All of the following
Mitsubishielectric R120encpu Firmware
Mitsubishielectric R120encpu
All of the following
Mitsubishielectric R16cpu Firmware
Mitsubishielectric R16cpu
All of the following
Mitsubishielectric R16encpu Firmware
Mitsubishielectric R16encpu
All of the following
Mitsubishielectric R32cpu Firmware
Mitsubishielectric R32cpu
All of the following
Mitsubishielectric R32encpu Firmware
Mitsubishielectric R32encpu
Event History
Mar 30, 2020
CVE Published
via MITRE·07:10 AM
Data Sourced
via MITRE·07:10 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-5527?
The CVE-2020-5527 vulnerability is classified with a high severity level due to its potential to allow resource exhaustion.
2
How do I fix CVE-2020-5527?
To fix CVE-2020-5527, update the firmware of your affected Mitsubishi Electric MELSEC devices to the latest version provided by the vendor.
3
Which Mitsubishi Electric MELSEC series are affected by CVE-2020-5527?
CVE-2020-5527 affects the MELSEC iQ-R, iQ-F, Q, L, and F series of Mitsubishi Electric controllers.
4
How does CVE-2020-5527 impact MELSEC devices?
CVE-2020-5527 impacts MELSEC devices by enabling massive data input through UDP/IP, potentially leading to resource exhaustion.
5
Is there any known exploit for CVE-2020-5527?
As of now, there is no publicly known exploit specifically targeting CVE-2020-5527.