CVE-2020-5527: Mitsubishielectric CR800-Q Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.

Affected products

• Mitsubishielectric CR800-Q Firmware: affected versions not specified
• Mitsubishielectric FX3G Firmware: affected versions not specified
• Mitsubishielectric FX3GC Firmware: affected versions not specified
• Mitsubishielectric FX3S Firmware: affected versions not specified
• Mitsubishielectric FX3U Firmware: affected versions not specified
• Mitsubishielectric FX3UC Firmware: affected versions not specified
• Mitsubishielectric FX5U Firmware: affected versions not specified
• Mitsubishielectric FX5UC Firmware: affected versions not specified
• Mitsubishielectric FX5UJ Firmware: affected versions not specified
• Mitsubishielectric l02cpu-P Firmware: affected versions not specified
• Mitsubishielectric l02cpu Firmware: affected versions not specified
• Mitsubishielectric l02scpu-P Firmware: affected versions not specified
• Mitsubishielectric l02scpu Firmware: affected versions not specified
• Mitsubishielectric l06cpu-P Firmware: affected versions not specified
• Mitsubishielectric l06cpu Firmware: affected versions not specified
• Mitsubishielectric l26cpu-Bt Firmware: affected versions not specified
• Mitsubishielectric l26cpu-P Firmware: affected versions not specified
• Mitsubishielectric l26cpu-Pbt Firmware: affected versions not specified
• Mitsubishielectric l26cpu Firmware: affected versions not specified
• Mitsubishielectric q02phcpu Firmware: affected versions not specified
• Mitsubishielectric q06phcpu Firmware: affected versions not specified
• Mitsubishielectric q12dccpu-V Firmware: affected versions not specified
• Mitsubishielectric q12phcpu Firmware: affected versions not specified
• Mitsubishielectric q12prhcpu Firmware: affected versions not specified
• Mitsubishielectric q172dscpu Firmware: affected versions not specified
• and 21 more

Published 2020-03-30. Last modified 2026-06-17.