CVE-2020-5658 Denial of service in MELSEC iQ-R series
Remote unauthenticated attackers can stop network functions in Mitsubishi MELSEC iQ-R modules via crafted packets, requiring firmware updates.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5658?
CVE-2020-5658 is a high-severity denial of service vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R series, published on 30 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.
Which versions are affected by CVE-2020-5658?
It affects 5 products.
Products include Mitsubishielectric Melsec Iq-Rd81dl96 Firmware, Mitsubishielectric Melsec Iq-Rd81mes96n Firmware, Mitsubishielectric Melsec Iq-Rd81opc96 Firmware, Mitsubishielectric Melsec Iq-Rj71eip91 Firmware, Mitsubishielectric Melsec Iq-Rj71pn92 Firmware.
How do I fix CVE-2020-5658?
No fix has been published for CVE-2020-5658 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-5658 being exploited?
There is no known exploitation of CVE-2020-5658 in the wild and no public exploit code.
Other vulnerabilities in Mitsubishi Electric Corporation MELSEC iQ-R series
Sources
Also known as GHSA-4xx9-w49x-56fh.