HIGH🇵🇱 Wersja polska

CVE-2019-6535

CVSS 7.5v3.1pub. 2019-02-05upd. 2025-06-26

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Mitsubishielectric Q03udecpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q03udecpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q03udvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q03udvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q04udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q04udehcpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q04udpvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q04udpvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q04udvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q04udvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q06udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q06udehcpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q06udpvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q06udpvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q06udvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q06udvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q100udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q100udehcpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q10udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q10udehcpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q13udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q13udehcpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q13udpvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q13udpvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q13udvcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q13udvcpu Firmware
OS
Mitsubishielectric
≤ 20081
Mitsubishielectric Q20udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q20udehcpu Firmware
OS
Mitsubishielectric
≤ 20101
Mitsubishielectric Q26udehcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric Q26udehcpu Firmware
OS
Mitsubishielectric
≤ 20101

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

References

www.securityfocus.com/bid/106771…

www.cisa.gov/news-events/ics-advisories/icsa-19-029-02…

www.securityfocus.com/bid/106771…

ics-cert.us-cert.gov/advisories/ICSA-19-029-02…

Related vulnerabilities

CVE-2020-16226CRITICAL9.8PL ✓same product

Podatność na podszywanie się pod urządzenie w produktach Mitsubishi Electric — RCE

CVE-2022-24946HIGH7.5same product

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions ...

CVE-2019-13555MEDIUM5.9same product

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVC...

CVE-2023-6943CRITICAL9.8PL ✓same vendor

Unsafe Reflection w oprogramowaniu Mitsubishi Electric — zdalne wykonanie kodu

CVE-2023-4699CRITICAL10.0PL ✓same vendor

Brak uwierzytelnienia w sterownikach PLC i CNC Mitsubishi Electric — RCE