title: Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module
description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
problem types: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/D
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-64MT/D
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-96MT/D
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-64MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-96MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: Serial number 17X**** or later, versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/DS-TS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/DSS-TS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MR/DS-TS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 1.220 to 1.281
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R00CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 and prior
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R01CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 and prior
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R02CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 and prior
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R04CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R04ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 12 to 68
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08SFCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 26 to 31
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16SFCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 26 to 31
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32SFCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 26 to 31
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120SFCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 26 to 31
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 3 to 37
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 3 to 37
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 3 to 37
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions from 3 to 37
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL