CVE-2019-6535
Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.
Timeline
- CVE published
- Record last updated
Affected versions
- Mitsubishi Electric Q03/04/06/13/26UDVCPU
through serial number 20081
- Mitsubishi Electric Q04/06/13/26UDPVCPU
through serial number 20081
- Mitsubishi Electric Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU
through serial number 20101