CVE-2019-6535 Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion
Remote attackers can crash the Ethernet stack and disrupt USB communication on Mitsubishi MELSEC-Q PLCs by sending specific bytes to Port 5007.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6535?
CVE-2019-6535 is a high-severity denial of service vulnerability in Mitsubishi Electric Q03/04/06/13/26UDVCPU, published on 5 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.
Weakness: CWE-400
Which versions are affected by CVE-2019-6535?
It affects 18 products.
Products include Mitsubishielectric Q03udecpu Firmware, Mitsubishielectric Q03udvcpu Firmware, Mitsubishielectric Q04udehcpu Firmware, Mitsubishielectric Q04udpvcpu Firmware, Mitsubishielectric Q04udvcpu Firmware, Mitsubishielectric Q06udehcpu Firmware and 12 more.
How do I fix CVE-2019-6535?
No fix has been published for CVE-2019-6535 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-6535 being exploited?
There is no known exploitation of CVE-2019-6535 in the wild and no public exploit code.
Sources
Also known as GHSA-6j5w-96r9-mm4v.