PT-2020-18520

CVE-2020-5545

·

Published

2020-03-16

·

Updated

2020-03-19

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELQIC IU1 series IU1-1M20-D versions 1.0.7 and earlier
Description The issue allows remote attackers to bypass access restrictions and either stop network functions or execute malware by sending a specially crafted packet. This is made possible through the TCP function included in the firmware.
Recommendations For versions 1.0.7 and earlier, update to a version later than 1.0.7 to resolve the issue. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾