What’s Vulnerable › Vulnerabilities

CVE-2020-16850

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-30 · updated 2026-06-17
• Weakness: CWE-20

Description

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

Affected products

• Mitsubishielectric R00Cpu Firmware: through 20
• Mitsubishielectric R01Cpu Firmware: through 20
• Mitsubishielectric R02Cpu Firmware: through 20
• Mitsubishielectric R04Cpu Firmware: through 52
• Mitsubishielectric R08Cpu Firmware: through 52
• Mitsubishielectric R08Pcpu Firmware: all versions
• Mitsubishielectric R08Sfcpu Firmware: through 22
• Mitsubishielectric R120Cpu Firmware: through 52
• Mitsubishielectric R120Pcpu Firmware: all versions
• Mitsubishielectric R120Sfcpu Firmware: through 22
• Mitsubishielectric R16Cpu Firmware: through 52
• Mitsubishielectric R16Mtcpu Firmware: all versions
• Mitsubishielectric R16Pcpu Firmware: all versions
• Mitsubishielectric R16Sfcpu Firmware: through 22
• Mitsubishielectric R32Cpu Firmware: through 52
• Mitsubishielectric R32Mtcpu Firmware: all versions
• Mitsubishielectric R32Pcpu Firmware: all versions
• Mitsubishielectric R32Sfcpu Firmware: through 22
• Mitsubishielectric R64Mtcpu Firmware: all versions

References

• https://blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-series
• https://us-cert.cisa.gov/ics/advisories/icsa-20-282-02
• https://blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-series
• https://us-cert.cisa.gov/ics/advisories/icsa-20-282-02

Get alerted when CVE-2020-16850 or the next vulnerability affects your stack