Sign-up

ID

VAR-202011-1250


CVE

CVE-2020-5654


TITLE

Made by Mitsubishi Electric MELSEC iQ-R Multiple vulnerabilities in the series

Trust: 0.8

sources: JVNDB: JVNDB-2020-009429

DESCRIPTION

Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Provided by Mitsubishi Electric Corporation MELSEC iQ-R Of the series EtherNet/IP Network interface unit, PROFINET IO Controller unit, high-speed data logger unit, MES Interface unit and OPC UA Of the server unit TCP/IP There are multiple vulnerabilities in the stack. ‥ * Buffer error (CWE-119) - CVE-2020-5653 ‥ * Session immobilization (CWE-384) - CVE-2020-5654 ‥ * NULL Pointer dereference (CWE-476) - CVE-2020-5655 ‥ * Inappropriate access control (CWE-284) - CVE-2020-5656 ‥ * Insert or change arguments (CWE-88) - CVE-2020-5657 ‥ * Resource management issues (CWE-399) - CVE-2020-5658 This vulnerability information is provided by the developer for the purpose of disseminating it to product users. JPCERT/CC Report to JPCERT/CC Coordinated with the developer.Receiving packets crafted by a third party can cause the product's network functionality to stop or malicious programs to run

Trust: 1.71

sources: NVD: CVE-2020-5654 // JVNDB: JVNDB-2020-009429 // VULMON: CVE-2020-5654

AFFECTED PRODUCTS

vendor:mitsubishielectricmodel:melsec iq-rj71pn92scope:eqversion: -

Trust: 1.0

vendor:mitsubishielectricmodel:melsec iq-rd81dl96scope:eqversion: -

Trust: 1.0

vendor:mitsubishielectricmodel:melsec iq-rd81opc96scope:eqversion: -

Trust: 1.0

vendor:mitsubishielectricmodel:melsec iq-rd81mes96nscope:eqversion: -

Trust: 1.0

vendor:mitsubishielectricmodel:melsec iq-rj71eip91scope:eqversion: -

Trust: 1.0

vendor:mitsubishi electricmodel:melsec iq-r seriesscope:eqversion:ethernet/ip ネットワークインタフェースユニット rj71eip91: シリアル no. の上 2桁が ”02” およびそれ以下

Trust: 0.8

vendor:mitsubishi electricmodel:melsec iq-r seriesscope:eqversion:mes インタフェースユニット rd81mes96n: シリアル no. の上 2桁が ”04” およびそれ以下

Trust: 0.8

vendor:mitsubishi electricmodel:melsec iq-r seriesscope:eqversion:opc ua サーバユニット rd81opc96: シリアル no. の上 2桁が ”04” およびそれ以下

Trust: 0.8

vendor:mitsubishi electricmodel:melsec iq-r seriesscope:eqversion:profinet io コントローラユニット rj71pn92: シリアル no. の上 2桁が ”01” およびそれ以下

Trust: 0.8

vendor:mitsubishi electricmodel:melsec iq-r seriesscope:eqversion:高速データロガーユニット rd81dl96: シリアル no. の上 2桁が ”08” およびそれ以下

Trust: 0.8

sources: JVNDB: JVNDB-2020-009429 // NVD: CVE-2020-5654

CVSS

SEVERITY

CVSSV2

CVSSV3

IPA: JVNDB-2020-009429
value: HIGH

Trust: 2.4

IPA: JVNDB-2020-009429
value: CRITICAL

Trust: 1.6

NVD: CVE-2020-5654
value: HIGH

Trust: 1.0

IPA: JVNDB-2020-009429
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202010-1665
value: HIGH

Trust: 0.6

NVD: CVE-2020-5654
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: FALSE
obtainAllPrivilege: FALSE
obtainUserPrivilege: FALSE
obtainOtherPrivilege: FALSE
userInteractionRequired: FALSE
version: 2.0

Trust: 1.0

IPA score: JVNDB-2020-009429
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 1.6

IPA score: JVNDB-2020-009429
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 1.6

NVD: CVE-2020-5654
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

IPA score: JVNDB-2020-009429
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

IPA score: JVNDB-2020-009429
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2020-009429 // JVNDB: JVNDB-2020-009429 // JVNDB: JVNDB-2020-009429 // JVNDB: JVNDB-2020-009429 // JVNDB: JVNDB-2020-009429 // JVNDB: JVNDB-2020-009429 // CNNVD: CNNVD-202010-1665 // NVD: CVE-2020-5654

PROBLEMTYPE DATA

problemtype:CWE-384

Trust: 1.0

sources: NVD: CVE-2020-5654

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202010-1665

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-202010-1665

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2020-5654

PATCH
title:MELSEC iQ-Rシリーズの各種情報／ネットワークユニットの TCP/IP機能における複数の脆弱性url:https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf
Trust: 0.8
title:Multiple Mitsubishi Electric Product Authorization Issue Vulnerability Fixing Measuresurl:http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=133129
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2020-009429 // 
            
            
            
            CNNVD: CNNVD-202010-1665

EXTERNAL IDS
db:JVNid:JVNVU92513419
Trust: 2.5
db:NVDid:CVE-2020-5654
Trust: 2.5
db:ICS CERTid:ICSA-20-303-02
Trust: 1.4
db:JVNDBid:JVNDB-2020-009429
Trust: 0.8
db:AUSCERTid:ESB-2020.3753
Trust: 0.6
db:CNNVDid:CNNVD-202010-1665
Trust: 0.6
db:VULMONid:CVE-2020-5654
Trust: 0.1
sources:
            
            
            VULMON: CVE-2020-5654 // 
            
            
            
            JVNDB: JVNDB-2020-009429 // 
            
            
            
            CNNVD: CNNVD-202010-1665 // 
            
            
            
            NVD: CVE-2020-5654

REFERENCES
url:https://jvn.jp/vu/jvnvu92513419/index.html
Trust: 1.7
url:https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf
Trust: 1.7
url:https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf
Trust: 1.7
url:https://us-cert.cisa.gov/ics/advisories/icsa-20-303-02
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5654
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5655
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5656
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5657
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5658
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5653
Trust: 0.8
url:https://jvn.jp/vu/jvnvu92513419/
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2020.3753/
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2020-5654
Trust: 0.6
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            VULMON: CVE-2020-5654 // 
            
            
            
            JVNDB: JVNDB-2020-009429 // 
            
            
            
            CNNVD: CNNVD-202010-1665 // 
            
            
            
            NVD: CVE-2020-5654

SOURCES
db:VULMONid:CVE-2020-5654
db:JVNDBid:JVNDB-2020-009429
db:CNNVDid:CNNVD-202010-1665
db:NVDid:CVE-2020-5654

LAST UPDATE DATE
2022-05-04T09:15:37.854000+00:00

SOURCES UPDATE DATE
db:VULMONid:CVE-2020-5654date:2020-11-10T00:00:00
db:JVNDBid:JVNDB-2020-009429date:2020-11-05T06:29:48
db:CNNVDid:CNNVD-202010-1665date:2020-11-12T00:00:00
db:NVDid:CVE-2020-5654date:2020-11-10T15:27:00

SOURCES RELEASE DATE
db:VULMONid:CVE-2020-5654date:2020-11-02T00:00:00
db:JVNDBid:JVNDB-2020-009429date:2020-11-05T06:29:48
db:CNNVDid:CNNVD-202010-1665date:2020-10-29T00:00:00
db:NVDid:CVE-2020-5654date:2020-11-02T21:15:00