High severity · published Nov 30, 2020
CVE-2020-16850
Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network
7.5
CVSS
2.1%
EPSS
No
On KEV
Description
Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
R00cpu Firmware · Mitsubishielectric
through 20 · source: NVD
RF
R01cpu Firmware · Mitsubishielectric
through 20 · source: NVD
RF
R02cpu Firmware · Mitsubishielectric
through 20 · source: NVD
RF
R04cpu Firmware · Mitsubishielectric
through 52 · source: NVD
RF
R08cpu Firmware · Mitsubishielectric
through 52 · source: NVD
RF
R08pcpu Firmware · Mitsubishielectric
All versions, or not specified · source: NVD
RF
R08sfcpu Firmware · Mitsubishielectric
through 22 · source: NVD
RF
R120cpu Firmware · Mitsubishielectric
through 52 · source: NVD
RF
R120pcpu Firmware · Mitsubishielectric
All versions, or not specified · source: NVD
RF
R120sfcpu Firmware · Mitsubishielectric
through 22 · source: NVD
RF
R16cpu Firmware · Mitsubishielectric
through 52 · source: NVD
RF
R16mtcpu Firmware · Mitsubishielectric
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-16850
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-16850
Third Party Advisory
https://blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-series
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-282-02
More from R00cpu Firmware
9.1
CVE-2022-40267
Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with…
7.5
CVE-2021-20591
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions,…
7.5
CVE-2020-5668
Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and…
7.5
CVE-2020-5527
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L…