CVE-2020-16850

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the…

published November 30, 2020

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02143 · 81.9th percentile
Published
2020-11-30T21:34Z
EPSS history
Timeline
  • 30 NOV 21:34Z
    Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the…
    cvelistv5