What’s Vulnerable › Vulnerabilities
CVE-2019-13555
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-11-13 · updated 2026-06-17
- Weakness: CWE-400
Description
In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.
Affected products
- Mitsubishielectric L02/06/26Cpu-Cm Firmware: through 21101
- Mitsubishielectric L02/06/26Cpu-P Firmware: through 21101
- Mitsubishielectric L02/06/26Cpu Firmware: through 21101
- Mitsubishielectric L26Cpu-Bt-Cm Firmware: through 21101
- Mitsubishielectric L26Cpu-Bt Firmware: through 21101
- Mitsubishielectric L26Cpu-Pbt Firmware: through 21101
- Mitsubishielectric Q03/04/06/13/26Udvcpu Firmware: through 21081
- Mitsubishielectric Q03Udecpu Firmware: through 21081
- Mitsubishielectric Q04/06/10/13/20/26/50/100Udehcpu Firmware: through 21081
- Mitsubishielectric Q04/06/13/26Udpvcpu Firmware: through 21081
References
- https://www.us-cert.gov/ics/advisories/icsa-19-311-01
- https://www.us-cert.gov/ics/advisories/icsa-19-311-01
Get alerted when CVE-2019-13555 or the next vulnerability affects your stack