Mitsubishielectric Melsec Iq-r00cpu Firmware vulnerabilities

2 CVEs affecting Mitsubishielectric Melsec Iq-r00cpu Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5652, published 2020-11-02.

More from Mitsubishielectric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-5652, published 2020-11-02. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware…
• CVE-2020-13238, published 2020-06-10. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack…