CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:mitsubishielectric:melsec_iq-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitsubishielectric:melsec_iq-r:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:mitsubishielectric:melsec_iq-f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitsubishielectric:melsec_iq-f:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:mitsubishielectric:melsec-q_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitsubishielectric:melsec-q:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:mitsubishielectric:melsec-l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitsubishielectric:melsec-l:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:mitsubishielectric:melsec-fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitsubishielectric:melsec-fx:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:34

Type Values Removed Values Added
References () https://jvn.jp/en/vu/JVNVU91424496/index.html - Third Party Advisory () https://jvn.jp/en/vu/JVNVU91424496/index.html - Third Party Advisory
References () https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-003.pdf - Vendor Advisory () https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-003.pdf - Vendor Advisory
References () https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-003_en.pdf - Vendor Advisory () https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-003_en.pdf - Vendor Advisory

Information

Published : 2020-06-23 08:15

Updated : 2024-11-21 05:34


NVD link : CVE-2020-5594

Mitre link : CVE-2020-5594

CVE.ORG link : CVE-2020-5594


JSON object : View

Products Affected

mitsubishielectric

  • melsec-l
  • melsec-q
  • melsec_iq-f
  • melsec-q_firmware
  • melsec-fx_firmware
  • melsec_iq-r_firmware
  • melsec-l_firmware
  • melsec-fx
  • melsec_iq-f_firmware
  • melsec_iq-r
CWE
CWE-319

Cleartext Transmission of Sensitive Information