Vulnerabilities > CVE-2020-5655 - NULL Pointer Dereference vulnerability in Mitsubishielectric products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 5 | |
| Hardware | 5 |
Common Weakness Enumeration (CWE)
References
- https://jvn.jp/vu/JVNVU92513419/index.html
- https://jvn.jp/vu/JVNVU92513419/index.html
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf