CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive…

published June 23, 2020

CVSS
—
EPSS
1%
Percentile
70.1
In the wild
Unconfirmed
What it is

⚠️ Sensitive data is flapping in the breeze! The Mitsubishi Electric MELSEC CPU modules transmit information in cleartext, which is like sending love letters without sealing the envelope. 💌 Think of your sensitive data as a secret recipe being shouted across a busy kitchen. Anyone nearby can hear it, and that could lead to some serious kitchen chaos! An attacker could easily intercept and read sensitive information transmitted between CPU modules and programming software, such as GX Works3 or GX Works2. This could lead to unauthorized access to your automation systems, potentially exposing critical operational information.

Put simply

Think of your sensitive data as a secret recipe being shouted across a busy kitchen. Anyone nearby can hear it, and that could lead to some serious kitchen chaos! This vulnerability exists because data is transmitted unencrypted between Mitsubishi Electric MELSEC CPU modules and their programming tools, making it susceptible to interception.

What to do

An attacker could easily intercept and read sensitive information transmitted between CPU modules and programming software, such as GX Works3 or GX Works2. This could lead to unauthorized access to your automation systems, potentially exposing critical operational information. To secure your systems, make sure to implement encryption for all data transmissions within the network. Regularly audit your systems for any data leaks and stay updated with the latest security patches from Mitsubishi Electric. You've got this! With a few proactive steps, you can seal off those data leaks and keep your system safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01296 · 70.1th percentile
Published
2020-06-23T07:35Z
EPSS history
Timeline
  • 23 JUN 07:35Z
    Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive…
    cvelistv5