CVE-2020-16850

highPriorität · verfolgen · 31EPSS 0.021 · 82. PerzentilEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
2.14% (82nd) EPSS
CVSS 7.8 · high
Is it mine?
85 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobeniQ-R series R00CPUcisa_csaf_ot

    iQ-R series R00CPU: Version 21 or later

  • BehobeniQ-R series R01CPUcisa_csaf_ot

    iQ-R series R01CPU: Version 21 or later

  • BehobeniQ-R series R04CPUcisa_csaf_ot

    iQ-R series R04CPU: Version 53 or later

  • BehobeniQ-R series R04ENCPUcisa_csaf_ot

    iQ-R series R04ENCPU: Version 53 or later

  • BehobeniQ-R series R08CPUcisa_csaf_ot

    iQ-R series R08CPU: Version 53 or later

  • BehobeniQ-R series R08ENCPUcisa_csaf_ot

    iQ-R series R08ENCPU: Version 53 or later

  • BehobeniQ-R series R08FCPUcisa_csaf_ot

    iQ-R series R08FCPU: Version 23 or later

  • BehobeniQ-R series R08PCPUcisa_csaf_ot

    iQ-R series R08PCPU: Version 26 or later

  • BehobeniQ-R series R120CPUcisa_csaf_ot

    iQ-R series R120CPU: Version 53 or later

  • BehobeniQ-R series R120ENCPUcisa_csaf_ot

    iQ-R series R120ENCPU: Version 53 or later

  • BehobeniQ-R series R120FCPUcisa_csaf_ot

    iQ-R series R120FCPU: Version 23 or later

  • BehobeniQ-R series R120PCPUcisa_csaf_ot

    iQ-R series R120PCPU: Version 26 or later

  • BehobeniQ-R series R16CPUcisa_csaf_ot

    iQ-R series R16CPU: Version 53 or later

  • BehobeniQ-R series R16ENCPUcisa_csaf_ot

    iQ-R series R16ENCPU: Version 53 or later

  • BehobeniQ-R series R16FCPUcisa_csaf_ot

    iQ-R series R16FCPU: Version 23 or later

  • BehobeniQ-R series R16MTCPU Operating system softwarecisa_csaf_ot

    iQ-R series R16MTCPU Operating system software: Version 22 or later

  • BehobeniQ-R series R16PCPUcisa_csaf_ot

    iQ-R series R16PCPU: Version 26 or later

  • BehobeniQ-R series R32CPUcisa_csaf_ot

    iQ-R series R32CPU: Version 53 or later

  • BehobeniQ-R series R32ENCPUcisa_csaf_ot

    iQ-R series R32ENCPU: Version 53 or later

  • BehobeniQ-R series R32FCPUcisa_csaf_ot

    iQ-R series R32FCPU: Version 23 or later

  • BehobeniQ-R series R32MTCPU Operating system softwarecisa_csaf_ot

    iQ-R series R32MTCPU Operating system software: Version 22 or later

  • BehobeniQ-R series R32PCPUcisa_csaf_ot

    iQ-R series R32PCPU: Version 26 or later

  • BehobeniQ-R series R64MTCPU Operating system softwarecisa_csaf_ot

    iQ-R series R64MTCPU Operating system software: Version 22 or later

  • MitigationiQ-R series R00CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R01CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R04CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R04ENCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08ENCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08FCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R08PCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120ENCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120FCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R120PCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16ENCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16FCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16MTCPU Operating system softwarecisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R16PCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32CPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32ENCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32FCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32MTCPU Operating system softwarecisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R32PCPUcisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

  • MitigationiQ-R series R64MTCPU Operating system softwarecisa_csaf_ot

    Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting thisvulnerability:

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.6
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–8.6

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · CISA US
v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USprimärCWE-400USprimärCWE-400USCWE-400US
04

betroffene Produkte (85)

Betroffene Produkte und Versionsbereiche.

20 von 85 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-20-282-02Mitsubishi Electric MELSEC iQ-R Series (Update D)2020-11-19icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could cause a denial-of-service condition.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2020-11-30geändert 2026-06-17
09

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan