CVE-2020-5657 Command injection in MELSEC iQ-R series
Unauthenticated attackers on adjacent networks can cause denial of service in Mitsubishi MELSEC iQ-R modules via argument injection in TCP/IP functions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5657?
CVE-2020-5657 is a medium-severity command injection vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R series, published on 30 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows unauthenticated attackers on adjacent network to stop the network functions of the products via a specially crafted packet.
Weakness: CWE-88
Which versions are affected by CVE-2020-5657?
It affects 5 products.
Products include Mitsubishielectric Melsec Iq-Rd81dl96 Firmware, Mitsubishielectric Melsec Iq-Rd81mes96n Firmware, Mitsubishielectric Melsec Iq-Rd81opc96 Firmware, Mitsubishielectric Melsec Iq-Rj71eip91 Firmware, Mitsubishielectric Melsec Iq-Rj71pn92 Firmware.
How do I fix CVE-2020-5657?
No fix has been published for CVE-2020-5657 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2020-5657 being exploited?
There is no known exploitation of CVE-2020-5657 in the wild and no public exploit code.
Other vulnerabilities in Mitsubishi Electric Corporation MELSEC iQ-R series
Sources
Also known as GHSA-wwhv-765h-78r7.