ICSA-20-282-02

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC iQ-R Series (Update D)

view advisory published 2020-11-19

Successful exploitation of this vulnerability could cause a denial-of-service condition.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-16850UShigh7.5—
Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of se…
02

references

External citations — patches, advisories, analysis.

03

remediations (46)

  • MitigationiQ-R series R00CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R01CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R04CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R04ENCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08ENCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08FCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08PCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120ENCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120FCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120PCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16ENCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16FCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16MTCPU Operating system software

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16PCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32CPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32ENCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32FCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32MTCPU Operating system software

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32PCPU

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R64MTCPU Operating system software

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • FixediQ-R series R00CPU

    iQ-R series R00CPU: Version 21 or later

  • FixediQ-R series R01CPU

    iQ-R series R01CPU: Version 21 or later

  • FixediQ-R series R04CPU

    iQ-R series R04CPU: Version 53 or later

  • FixediQ-R series R04ENCPU

    iQ-R series R04ENCPU: Version 53 or later

  • FixediQ-R series R08CPU

    iQ-R series R08CPU: Version 53 or later

  • FixediQ-R series R08ENCPU

    iQ-R series R08ENCPU: Version 53 or later

  • FixediQ-R series R08FCPU

    iQ-R series R08FCPU: Version 23 or later

  • FixediQ-R series R08PCPU

    iQ-R series R08PCPU: Version 26 or later

  • FixediQ-R series R120CPU

    iQ-R series R120CPU: Version 53 or later

  • FixediQ-R series R120ENCPU

    iQ-R series R120ENCPU: Version 53 or later

  • FixediQ-R series R120FCPU

    iQ-R series R120FCPU: Version 23 or later

  • FixediQ-R series R120PCPU

    iQ-R series R120PCPU: Version 26 or later

  • FixediQ-R series R16CPU

    iQ-R series R16CPU: Version 53 or later

  • FixediQ-R series R16ENCPU

    iQ-R series R16ENCPU: Version 53 or later

  • FixediQ-R series R16FCPU

    iQ-R series R16FCPU: Version 23 or later

  • FixediQ-R series R16MTCPU Operating system software

    iQ-R series R16MTCPU Operating system software: Version 22 or later

  • FixediQ-R series R16PCPU

    iQ-R series R16PCPU: Version 26 or later

  • FixediQ-R series R32CPU

    iQ-R series R32CPU: Version 53 or later

  • FixediQ-R series R32ENCPU

    iQ-R series R32ENCPU: Version 53 or later

  • FixediQ-R series R32FCPU

    iQ-R series R32FCPU: Version 23 or later

  • FixediQ-R series R32MTCPU Operating system software

    iQ-R series R32MTCPU Operating system software: Version 22 or later

  • FixediQ-R series R32PCPU

    iQ-R series R32PCPU: Version 26 or later

  • FixediQ-R series R64MTCPU Operating system software

    iQ-R series R64MTCPU Operating system software: Version 22 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan