Vulnerability Description
TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the network functions or execute malware via a specially crafted packet.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishielectric | Iu1-1M20-D Firmware | <= 1.0.7 |
| Mitsubishielectric | Iu1-1M20-D | - |
References
- https://jvn.jp/en/vu/JVNVU92370624/index.htmlThird Party Advisory
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdfPatchVendor Advisory
- https://jvn.jp/en/vu/JVNVU92370624/index.htmlThird Party Advisory
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdfPatchVendor Advisory
FAQ
What is CVE-2020-5545?
CVE-2020-5545 is a vulnerability with a CVSS score of 9.8 (CRITICAL). TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the networ...
How severe is CVE-2020-5545?
CVE-2020-5545 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-5545?
Check the references section above for vendor advisories and patch information. Affected products include: Mitsubishielectric Iu1-1M20-D Firmware, Mitsubishielectric Iu1-1M20-D.