1. Home
  2. CVE Database
  3. CVE-2020-5531
CRITICAL · 9.8

CVE-2020-5531

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 211...

Vulnerability Description

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MitsubishielectricMi5122-Vw Firmware<= 03
MitsubishielectricMi5122-Vw-
MitsubishielectricQ24Dhccpu-V Firmware<= 21121
MitsubishielectricQ24Dhccpu-V-
MitsubishielectricQ24Dhccpu-Vg Firmware<= 21121
MitsubishielectricQ24Dhccpu-Vg-
MitsubishielectricR12Ccpu-V Firmware<= 11
MitsubishielectricR12Ccpu-V-
MitsubishielectricRd55Up06-V Firmware<= 08
MitsubishielectricRd55Up06-V-

References

FAQ

What is CVE-2020-5531?

CVE-2020-5531 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 211...

How severe is CVE-2020-5531?

CVE-2020-5531 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-5531?

Check the references section above for vendor advisories and patch information. Affected products include: Mitsubishielectric Mi5122-Vw Firmware, Mitsubishielectric Mi5122-Vw, Mitsubishielectric Q24Dhccpu-V Firmware, Mitsubishielectric Q24Dhccpu-V, Mitsubishielectric Q24Dhccpu-Vg Firmware.