High severity7.5NVD Advisory· Published Nov 16, 2020· Updated Jun 17, 2026
CVE-2020-5666
CVE-2020-5666
Description
Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') allows a remote attacker to cause an error in a CPU unit via a specially crafted HTTP packet, which may lead to a denial-of-service (DoS) condition in execution of the program and its communication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- cpe:2.3:o:mitsubishielectric:melsec_iq-r00_firmware:*:*:*:*:*:*:*:*Range: >=05,<=19
- cpe:2.3:o:mitsubishielectric:melsec_iq-r01_firmware:*:*:*:*:*:*:*:*Range: >=05,<=19
- cpe:2.3:o:mitsubishielectric:melsec_iq-r02_firmware:*:*:*:*:*:*:*:*Range: >=05,<=19
- cpe:2.3:o:mitsubishielectric:melsec_iq-r04_firmware:*:*:*:*:*:*:*:*Range: >=35,<=51
- cpe:2.3:o:mitsubishielectric:melsec_iq-r16_firmware:*:*:*:*:*:*:*:*Range: >=35,<=51
- cpe:2.3:o:mitsubishielectric:melsec_iq-r08_firmware:*:*:*:*:*:*:*:*Range: >=35,<=51
- cpe:2.3:o:mitsubishielectric:melsec_iq-r32_firmware:*:*:*:*:*:*:*:*Range: >=35,<=51
- cpe:2.3:o:mitsubishielectric:melsec_iq-r120_firmware:*:*:*:*:*:*:*:*Range: >=35,<=51
R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51'+ 1 more
- (no CPE)range: R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51'
- (no CPE)range: R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51'
Patches
Vulnerability mechanics
References
4- jvn.jp/en/jp/JVN44764844/index.htmlnvdThird Party Advisory
- jvn.jp/jp/JVN44764844/index.htmlnvdThird Party Advisory
- us-cert.cisa.gov/ics/advisories/icsa-20-317-01nvdThird Party AdvisoryUS Government Resource
- www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-015_en.pdfnvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.