CVE-2020-5545

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass…

published March 16, 2020

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

⚠️ A single crafted packet can wreak havoc! This vulnerability in Mitsubishi Electric's MELQIC IU1 series firmware allows attackers to bypass access restrictions and disrupt network functions. 🔥 Think of it like a sneaky delivery service that misdelivers a package straight to the control room, allowing an intruder to switch off alarms or deliver harmful materials without anyone knowing. 📦🔒 An attacker could stop critical network functions or even execute malware, presenting a significant risk of operational disruption or data compromise. This kind of access could lead to an absolute nightmare for anyone relying on secure network operations!

Put simply

Think of it like a sneaky delivery service that misdelivers a package straight to the control room, allowing an intruder to switch off alarms or deliver harmful materials without anyone knowing. 📦🔒 The TCP function in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D versions 1.0.7 and earlier lacks proper access controls, allowing remote attackers to send specially crafted packets to disrupt service or deploy malicious code.

What to do

An attacker could stop critical network functions or even execute malware, presenting a significant risk of operational disruption or data compromise. This kind of access could lead to an absolute nightmare for anyone relying on secure network operations! Immediately upgrade to the latest firmware version to patch this vulnerability. Ensure that proper access controls are in place and consider monitoring network traffic for any suspicious activity. 🚀 You've got this! Take these steps to secure your systems and regain control! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02345 · 83.5th percentile
Published
2020-03-16T01:25Z
EPSS history
Timeline
  • 16 MAR 01:25Z
    TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass…
    cvelistv5