ICSA-20-161-02

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC iQ-R Series (Update C)

view advisory published 2020-06-09

Successful exploitation of this vulnerability could cause the Ethernet port to enter a denial-of-service condition.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-13238UShigh7.5—
Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denia…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationR00/01/02CPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR04/08/16/32/120CPU R04/08/16/32/120ENCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR08/16/32/120PCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR08/16/32/120PSFCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR08/16/32/120SFCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationRJ71EN71

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • FixedR00/01/02CPU

    R00/01/02CPU: Firmware Versions 8 or later

  • FixedR04/08/16/32/120CPU R04/08/16/32/120ENCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • FixedR08/16/32/120PCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • FixedR08/16/32/120PSFCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • FixedR08/16/32/120SFCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • FixedRJ71EN71

    R00/01/02CPU: Firmware Versions 8 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan