CVE-2019-13555 Denial of service in Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior.
A remote attacker can cause a denial-of-service condition in Mitsubishi Electric MELSEC PLCs by exploiting a timing-dependent flaw in the FTP service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-13555?
CVE-2019-13555 is a medium-severity denial of service vulnerability in Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior., published on 13 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.
Weakness: CWE-400
Which versions are affected by CVE-2019-13555?
It affects 10 products.
Products include Mitsubishielectric L02\/06\/26cpu-Cm Firmware, Mitsubishielectric L02\/06\/26cpu-P Firmware, Mitsubishielectric L02\/06\/26cpu Firmware, Mitsubishielectric L26cpu-Bt-Cm Firmware, Mitsubishielectric L26cpu-Bt Firmware, Mitsubishielectric L26cpu-Pbt Firmware and 4 more.
How do I fix CVE-2019-13555?
No fix has been published for CVE-2019-13555 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-13555 being exploited?
There is no known exploitation of CVE-2019-13555 in the wild and no public exploit code.
Sources
Also known as GHSA-r5rh-4cpr-qxhj.