CVE-2020-13238

Publicada em 10 jun 2020 · Atualizada em 04 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.4%

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production.

Produtos afetados

n/a · n/a

Referências

http://jvn.jp/vu/JVNVU97662844/index.html https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-001_en.pdf https://www.us-cert.gov/ics/advisories/icsa-20-161-02