HIGH🇵🇱 Wersja polska

CVE-2020-16850

CVSS 7.5v3.1pub. 2020-11-30upd. 2024-11-21

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Mitsubishielectric R00cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R00cpu Firmware

    OS
    Mitsubishielectric
    ≤ 20

  • Mitsubishielectric R01cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R01cpu Firmware

    OS
    Mitsubishielectric
    ≤ 20

  • Mitsubishielectric R02cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R02cpu Firmware

    OS
    Mitsubishielectric
    ≤ 20

  • Mitsubishielectric R04cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R04cpu Firmware

    OS
    Mitsubishielectric
    ≤ 52

  • Mitsubishielectric R08cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R08cpu Firmware

    OS
    Mitsubishielectric
    ≤ 52

  • Mitsubishielectric R08pcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R08pcpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric R08sfcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R08sfcpu Firmware

    OS
    Mitsubishielectric
    ≤ 22

  • Mitsubishielectric R120cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R120cpu Firmware

    OS
    Mitsubishielectric
    ≤ 52

  • Mitsubishielectric R120pcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R120pcpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric R120sfcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R120sfcpu Firmware

    OS
    Mitsubishielectric
    ≤ 22

  • Mitsubishielectric R16cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R16cpu Firmware

    OS
    Mitsubishielectric
    ≤ 52

  • Mitsubishielectric R16mtcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R16mtcpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric R16pcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R16pcpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric R16sfcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R16sfcpu Firmware

    OS
    Mitsubishielectric
    ≤ 22

  • Mitsubishielectric R32cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric R32cpu Firmware

    OS
    Mitsubishielectric
    ≤ 52
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassDoS
CWE
References

Related vulnerabilities

CVE-2021-20599CRITICAL9.1PL ✓same product

Podatność na przechwycenie danych uwierzytelniających w sterownikach MELSEC iQ-R

CVE-2021-20597CRITICAL9.1PL ✓same product

Niechronione dane uwierzytelniające w sterownikach Mitsubishi Electric MELSEC iQ-R

CVE-2021-20594HIGH7.5same product

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R se...

CVE-2021-20591HIGH7.5same product

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/...

CVE-2020-5668HIGH7.5same product

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '...