What’s Vulnerable › Vulnerabilities
CVE-2020-5652
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-11-02 · updated 2026-06-17
- Weakness: CWE-400
Description
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition .
Affected products
- Mitsubishielectric Melsec Iq-R00Cpu Firmware: 20
- Mitsubishielectric Melsec Iq-R01Cpu Firmware: 20
- Mitsubishielectric Melsec Iq-R02Cpu Firmware: 20
- Mitsubishielectric Melsec Iq-R04Encpu Firmware: 52
- Mitsubishielectric Melsec Iq-R08Encpu Firmware: 52
- Mitsubishielectric Melsec Iq-R08Pcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R08Psfcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R08Sfcpu Firmware: 22
- Mitsubishielectric Melsec Iq-R120Encpu Firmware: 52
- Mitsubishielectric Melsec Iq-R120Pcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R120Psfcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R120Sfcpu Firmware: 22
- Mitsubishielectric Melsec Iq-R16Encpu Firmware: 52
- Mitsubishielectric Melsec Iq-R16Mtcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R16Pcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R16Psfcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R16Sfcpu Firmware: 22
- Mitsubishielectric Melsec Iq-R32Encpu Firmware: 52
- Mitsubishielectric Melsec Iq-R32Mtcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R32Pcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R32Psfcpu Firmware: all versions
- Mitsubishielectric Melsec Iq-R32Sfcpu Firmware: 22
- Mitsubishielectric Melsec Iq-R64Mtcpu Firmware: all versions
- Mitsubishielectric Melsec L02Cpu-P Firmware: all versions
- Mitsubishielectric Melsec L06Cpu-P Firmware: all versions
- Mitsubishielectric Melsec L26Cpu-P Firmware: all versions
- Mitsubishielectric Melsec L26Cpu-Pbt Firmware: all versions
- Mitsubishielectric Melsec Q-Q03Udecpu Firmware: 22081
- Mitsubishielectric Melsec Q-Q03Udvcpu Firmware: 22031
- Mitsubishielectric Melsec Q-Q04Udehcpu Firmware: 22081
References
- https://jvn.jp/vu/JVNVU96558207/index.html
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf
- https://jvn.jp/vu/JVNVU96558207/index.html
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf
Get alerted when CVE-2020-5652 or the next vulnerability affects your stack