Details of VAR-202006-0119

ID

VAR-202006-0119

CVE

CVE-2020-13238

TITLE

Made by Mitsubishi Electric MELSEC iQ-R Of the series Ethernet Port resource exhaustion vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2020-005243

DESCRIPTION

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production. Provided by Mitsubishi Electric Corporation MELSEC iQ-R Resource exhaustion vulnerabilities in series units (CWE-400) Exists This vulnerability information is provided by the developer for the purpose of making it known to product users. JPCERT/CC Report to JPCERT/CC Coordinated with the developers.When a malicious packet is received from a remote third party, Ethernet Port communication interferes with service operation (DoS) It may be in a state. A reset is required for recovery. Misubishi Electric MELSEC iQ-R series is a programmable logic controller manufactured by Misubishi Electric, Japan

Trust: 2.25

sources: NVD: CVE-2020-13238 // JVNDB: JVNDB-2020-005243 // CNVD: CNVD-2020-46803 // VULMON: CVE-2020-13238

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-46803

AFFECTED PRODUCTS

vendor:	mitsubishielectric	model:	melsec iq-r08pcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-rj71en71	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r01cpu	scope:	lte	version:	7	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r00cpu	scope:	lte	version:	7	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r08fcpu	scope:	lte	version:	20	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r120pcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r04cpu	scope:	lte	version:	39	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r08cpu	scope:	lte	version:	39	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r16cpu	scope:	lte	version:	39	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r16fcpu	scope:	lte	version:	20	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r16pcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r32sfcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r120fcpu	scope:	lte	version:	20	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r02cpu	scope:	lte	version:	7	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r32fcpu	scope:	lte	version:	20	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r16sfcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r32cpu	scope:	lte	version:	39	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r32pcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r120cpu	scope:	lte	version:	39	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r08sfcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	mitsubishielectric	model:	melsec iq-r120sfcpu	scope:	eq	version:	*	Trust: 1.0
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	eq	version:	-	Trust: 0.8
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	lte	version:	melsec iq-r series r00/01/02cpu firmware version "7" and earlier	Trust: 0.8
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	lte	version:	melsec iq-r series r04/08/16/32/120cpu , r04/08/16/32/120encpu firmware version "39" and earlier	Trust: 0.8
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	lte	version:	melsec iq-r series r08/16/32/120sfcpu firmware version "20 " and earlier	Trust: 0.8
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	lte	version:	melsec iq-r series r08/16/32/120pcpu firmware version " 24 " and earlier	Trust: 0.8
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	lte	version:	melsec iq-r series r08/16/32/120psfcpu firmware version " 05 " and earlier	Trust: 0.8
vendor:	三菱電機	model:	melsec iq-r シリーズ	scope:	lte	version:	melsec iq-r series rj71en71 firmware version " 49 " and earlier	Trust: 0.8
vendor:	mitsubishi	model:	electric r04/08/16/32/120encpu	scope:	lte	version:	<=39	Trust: 0.6
vendor:	mitsubishi	model:	electric r00/01/02cpu	scope:	lte	version:	<=7	Trust: 0.6
vendor:	mitsubishi	model:	electric r08/16/32/120sfcpu	scope:	lte	version:	<=20	Trust: 0.6
vendor:	mitsubishi	model:	electric r08/16/32/120pcpu	scope:	-	version:	-	Trust: 0.6
vendor:	mitsubishi	model:	electric r08/16/32/120psfcpu	scope:	-	version:	-	Trust: 0.6
vendor:	mitsubishi	model:	electric rj71en71	scope:	-	version:	-	Trust: 0.6
vendor:	mitsubishi	model:	electric r04/08/16/32/120cpu	scope:	lte	version:	<=39	Trust: 0.6

sources: CNVD: CNVD-2020-46803 // JVNDB: JVNDB-2020-005243 // NVD: CVE-2020-13238

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-13238
value:	HIGH
Trust: 1.0
JPCERT/CC:	JVNDB-2020-005243
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2020-46803
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202006-827
value:	HIGH
Trust: 0.6
VULMON:	CVE-2020-13238
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2020-13238
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
JPCERT/CC:	JVNDB-2020-005243
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2020-46803
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2020-13238
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
JPCERT/CC:	JVNDB-2020-005243
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2020-46803 // VULMON: CVE-2020-13238 // JVNDB: JVNDB-2020-005243 // CNNVD: CNNVD-202006-827 // NVD: CVE-2020-13238

PROBLEMTYPE DATA

problemtype:	CWE-400	Trust: 1.0
problemtype:	Resource exhaustion (CWE-400) [JPCERT/CC Evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2020-005243 // NVD: CVE-2020-13238

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202006-827

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-202006-827

PATCH

title:	MELSEC iQ-R Of the series Ethernet Denial of service on port (DoS) Vulnerability	url:	https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-001.pdf	Trust: 0.8
title:	-	url:	https://github.com/yossireuven/Publications	Trust: 0.1

sources: VULMON: CVE-2020-13238 // JVNDB: JVNDB-2020-005243

EXTERNAL IDS

db:	ICS CERT	id:	ICSA-20-161-02	Trust: 3.1
db:	NVD	id:	CVE-2020-13238	Trust: 3.1
db:	JVN	id:	JVNVU97662844	Trust: 2.5
db:	JVNDB	id:	JVNDB-2020-005243	Trust: 0.8
db:	CNVD	id:	CNVD-2020-46803	Trust: 0.6
db:	AUSCERT	id:	ESB-2020.2013	Trust: 0.6
db:	CNNVD	id:	CNNVD-202006-827	Trust: 0.6
db:	VULMON	id:	CVE-2020-13238	Trust: 0.1

sources: CNVD: CNVD-2020-46803 // VULMON: CVE-2020-13238 // JVNDB: JVNDB-2020-005243 // CNNVD: CNNVD-202006-827 // NVD: CVE-2020-13238

REFERENCES

url:	https://www.us-cert.gov/ics/advisories/icsa-20-161-02	Trust: 3.7
url:	http://jvn.jp/vu/jvnvu97662844/index.html	Trust: 2.5
url:	https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-001_en.pdf	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2020-13238	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2020.2013/	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsa-20-161-02	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/400.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://github.com/yossireuven/publications	Trust: 0.1

sources: CNVD: CNVD-2020-46803 // VULMON: CVE-2020-13238 // JVNDB: JVNDB-2020-005243 // CNNVD: CNNVD-202006-827 // NVD: CVE-2020-13238

SOURCES

db:	CNVD	id:	CNVD-2020-46803
db:	VULMON	id:	CVE-2020-13238
db:	JVNDB	id:	JVNDB-2020-005243
db:	CNNVD	id:	CNNVD-202006-827
db:	NVD	id:	CVE-2020-13238

LAST UPDATE DATE

2024-11-23T23:04:23.619000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2020-46803	date:	2020-08-19T00:00:00
db:	VULMON	id:	CVE-2020-13238	date:	2020-06-23T00:00:00
db:	JVNDB	id:	JVNDB-2020-005243	date:	2021-04-21T04:58:00
db:	CNNVD	id:	CNNVD-202006-827	date:	2020-11-06T00:00:00
db:	NVD	id:	CVE-2020-13238	date:	2024-11-21T05:00:51.327

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2020-46803	date:	2020-08-19T00:00:00
db:	VULMON	id:	CVE-2020-13238	date:	2020-06-10T00:00:00
db:	JVNDB	id:	JVNDB-2020-005243	date:	2020-06-10T00:00:00
db:	CNNVD	id:	CNNVD-202006-827	date:	2020-06-09T00:00:00
db:	NVD	id:	CVE-2020-13238	date:	2020-06-10T20:15:14.140