What’s Vulnerable › Vulnerabilities

CVE-2020-5668

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-20 · updated 2026-06-17
• Weakness: CWE-400

Description

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU firmware version '06' and earlier, RJ71EN71 firmware version '47' and earlier, RJ71GF11-T2 firmware version '47' and earlier, RJ72GF15-T2 firmware version '07' and earlier, RJ71GP21-SX firmware version '47' and earlier, RJ71GP21S-SX firmware version '47' and earlier, and RJ71GN11-T2 firmware version '11' and earlier) allows a remote unauthenticated attacker to cause an error in a CPU unit and cause a denial-of-service (DoS) condition in execution of the program and its communication, or to cause a denial-of-service (DoS) condition in communication via the unit by receiving a specially crafted SLMP packet

Affected products

• Mitsubishielectric R00Cpu Firmware: through 19
• Mitsubishielectric R01Cpu Firmware: through 19
• Mitsubishielectric R02Cpu Firmware: through 19
• Mitsubishielectric R04Cpu Firmware: through 51
• Mitsubishielectric R08Cpu Firmware: through 51
• Mitsubishielectric R08Pcpu Firmware: through 25
• Mitsubishielectric R08Psfcpu Firmware: through 06
• Mitsubishielectric R08Sfcpu Firmware: through 22
• Mitsubishielectric R120Cpu Firmware: through 51
• Mitsubishielectric R120Pcpu Firmware: through 25
• Mitsubishielectric R120Psfcpu Firmware: through 06
• Mitsubishielectric R120Sfcpu Firmware: through 22
• Mitsubishielectric R16Cpu Firmware: through 51
• Mitsubishielectric R16Pcpu Firmware: through 25
• Mitsubishielectric R16Psfcpu Firmware: through 06
• Mitsubishielectric R16Sfcpu Firmware: through 22
• Mitsubishielectric R32Cpu Firmware: through 51
• Mitsubishielectric R32Pcpu Firmware: through 25
• Mitsubishielectric R32Psfcpu Firmware: through 06
• Mitsubishielectric R32Sfcpu Firmware: through 22
• Mitsubishielectric Rj71C24-R2 Firmware: through 47
• Mitsubishielectric Rj71C24-R4 Firmware: through 47
• Mitsubishielectric Rj71En71 Firmware: through 47
• Mitsubishielectric Rj71Gf11-T2 Firmware: through 47
• Mitsubishielectric Rj71Gn11-T2 Firmware: through 11
• Mitsubishielectric Rj71Gp21-Sx Firmware: through 47
• Mitsubishielectric Rj71Gp21S-Sx Firmware: through 47
• Mitsubishielectric Rj72Gf15-T2 Firmware: through 07

References

• https://jvn.jp/vu/JVNVU95980140/index.html
• https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdf
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdf
• https://jvn.jp/vu/JVNVU95980140/index.html
• https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdf
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdf

Get alerted when CVE-2020-5668 or the next vulnerability affects your stack