Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2019-6535

Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion

Description

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric Q03/04/06/13/26UDVCPU

Default version status: unaffected

  • 0 to ≤ serial number 20081affected

Mitsubishi Electric Q04/06/13/26UDPVCPU

Default version status: unaffected

  • 0 to ≤ serial number 20081affected

Mitsubishi Electric Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU

Default version status: unaffected

  • 0 to ≤ serial number 20101affected

References