What is the severity of CVE-2020-5527?

The CVE-2020-5527 vulnerability is classified with a high severity level due to its potential to allow resource exhaustion.

How do I fix CVE-2020-5527?

To fix CVE-2020-5527, update the firmware of your affected Mitsubishi Electric MELSEC devices to the latest version provided by the vendor.

Which Mitsubishi Electric MELSEC series are affected by CVE-2020-5527?

CVE-2020-5527 affects the MELSEC iQ-R, iQ-F, Q, L, and F series of Mitsubishi Electric controllers.

How does CVE-2020-5527 impact MELSEC devices?

CVE-2020-5527 impacts MELSEC devices by enabling massive data input through UDP/IP, potentially leading to resource exhaustion.

Is there any known exploit for CVE-2020-5527?

As of now, there is no publicly known exploit specifically targeting CVE-2020-5527.

Vulnerability/
CVE-2020-5527

high

7.5

CWE

400

30/3/2020

4/8/2024

CVE-2020-5527

First published: Mon Mar 30 2020(Updated: )

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.

Credit: vultures@jpcert.or.jp

Affected Software	Affected Version	How to fix
Mitsubishi Electric CR800-Q
Mitsubishi Electric CR800-Q
Mitsubishi Electric FX3G Firmware
Mitsubishi Electric FX3G
Mitsubishi Electric FX3GC Firmware
Mitsubishi Electric FX3GC Firmware
Mitsubishi Electric FX3S Firmware
Mitsubishi Electric FX3S Firmware
Mitsubishi Electric FX3U Firmware
Mitsubishi Electric FX3U Firmware
Mitsubishielectric Fx3uc Firmware
Mitsubishielectric Fx3uc Firmware
Mitsubishi Electric FX5U Firmware
Mitsubishi Electric FX5U
Mitsubishielectric Fx5uc Firmware
Mitsubishielectric Fx5uc Firmware
Mitsubishi Electric FX5UJ Firmware
Mitsubishi Electric FX5UJ
Mitsubishi Melsec L02CPU-P Firmware
Mitsubishi Electric L02CPU
Mitsubishi Electric Melsec L02CPU-P Firmware
Mitsubishi Electric Melsec L02CPU-P
Mitsubishi Electric L02SC CPU
Mitsubishi Electric L02SC CPU
Mitsubishi Electric L02SC CPU
Mitsubishi Electric L02SC CPU
Mitsubishi Melsec L06CPU(-P) Firmware
Mitsubishi Electric L06CPU
Mitsubishielectric Melsec L06cpu-p Firmware
Mitsubishi Electric Melsec L06CPU-P
Mitsubishi Electric L26CPU Firmware
Mitsubishi Electric L26CPU
Mitsubishi Electric L26CPU-BT
Mitsubishi Electric L26CPU-BT
Mitsubishi Electric Melsec L26CPU-P Firmware
Mitsubishi Electric Melsec L26CPU-P
Mitsubishi Electric Melsec L26CPU-PBT Firmware
Mitsubishielectric Melsec L26cpu-pbt
Mitsubishielectric Q02phcpu
Mitsubishi Electric Q02PHCPU Firmware
Mitsubishi Electric Q06PHCPU
Mitsubishielectric Q06phcpu Firmware
Mitsubishielectric Q12dccpu-v
Mitsubishielectric Q12dccpu-v Firmware
Mitsubishielectric Q12phcpu Firmware
Mitsubishi Electric Q12PHCPU
Mitsubishi Electric Q12PRHCPU
Mitsubishielectric Q12prhcpu Firmware
Mitsubishi Electric Q172DSCPU Firmware
Mitsubishi Electric Q172DSCPU Firmware
Mitsubishi Electric Q173DScpu Firmware
Mitsubishi Electric Q173DScpu Firmware
Mitsubishi Electric Q173NCCPU
Mitsubishi Electric Q173NCCPU
Mitsubishi Electric Q24DHCCPU-LS
Mitsubishi Electric Q24DHCCPU-LS
Mitsubishi Melsec Q24dhccpu-v(g) Firmware
Mitsubishi Electric Q24DHCCPU-V
Mitsubishi Electric Q24DHCCPU-VG2
Mitsubishielectric Q24dhccpu-vg2 Firmware
Mitsubishi Electric Q25PHCPU
Mitsubishi Electric Q25PHCPU
Mitsubishielectric Q25prhcpu
Mitsubishielectric Q25prhcpu Firmware
Mitsubishi Electric Q26DHCCPU-LS
Mitsubishielectric Q26dhccpu-ls Firmware
Mitsubishi Electric R00CPU Firmware
Mitsubishi Electric R00CPU
Mitsubishi Electric R01CPU
Mitsubishi Electric R01CPU
Mitsubishielectric R02cpu
Mitsubishielectric R02cpu Firmware
Mitsubishi Electric R04CPU
Mitsubishi Electric R04CPU
Mitsubishi Electric Rnencpu (n=04/08/16/32/120) Firmware
Mitsubishielectric R04encpu Firmware
Mitsubishi Electric R08CPU Firmware
Mitsubishi Electric R08CPU Firmware
Mitsubishielectric R08encpu Firmware
Mitsubishielectric R08encpu Firmware
Mitsubishi Electric R120CPU
Mitsubishi Electric R120PCPU
Mitsubishi Electric R120ENCPU
Mitsubishi Electric R120ENCPU
Mitsubiushi Electric R16cpu Firmware
Mitsubishi Electric R16CPU
Mitsubishielectric R16encpu
Mitsubishielectric R16encpu Firmware
Mitsubishielectric R32cpu
Mitsubishielectric R32cpu Firmware
Mitsubishi Electric R32 ENCPU
Mitsubishi Electric R32 encpu

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2020-5527?
The CVE-2020-5527 vulnerability is classified with a high severity level due to its potential to allow resource exhaustion.
How do I fix CVE-2020-5527?
To fix CVE-2020-5527, update the firmware of your affected Mitsubishi Electric MELSEC devices to the latest version provided by the vendor.
Which Mitsubishi Electric MELSEC series are affected by CVE-2020-5527?
CVE-2020-5527 affects the MELSEC iQ-R, iQ-F, Q, L, and F series of Mitsubishi Electric controllers.
How does CVE-2020-5527 impact MELSEC devices?
CVE-2020-5527 impacts MELSEC devices by enabling massive data input through UDP/IP, potentially leading to resource exhaustion.
Is there any known exploit for CVE-2020-5527?
As of now, there is no publicly known exploit specifically targeting CVE-2020-5527.