CVE Feed

    Dashboard / CVE / CVE-2020-5603

    CVE-2020-5603

    Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors.

    Published:Jun 30, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 30, 2020
    EPSS Score:0.00494
    CVSS Score:7.5

    Affected Products

    Vendor
    Mitsubishielectric
    Product
    Cpu Module Logging Configuration Tool
    Vendor
    Mitsubishielectric
    Product
    Cw Configurator
    Vendor
    Mitsubishielectric
    Product
    Em Configurator
    Vendor
    Mitsubishielectric
    Product
    Gt Designer3
    Vendor
    Mitsubishielectric
    Product
    Gx Logviewer
    Vendor
    Mitsubishielectric
    Product
    Gx Works2
    Vendor
    Mitsubishielectric
    Product
    Gx Works3
    Vendor
    Mitsubishielectric
    Product
    M Commdtm-hart
    Vendor
    Mitsubishielectric
    Product
    M Commdtm-io-link
    Vendor
    Mitsubishielectric
    Product
    Melfa-works
    Vendor
    Mitsubishielectric
    Product
    Melsec-l Flexible High-speed I\/o Control Module Configuration Tool
    Vendor
    Mitsubishielectric
    Product
    Melsoft Fielddeviceconfigurator
    Vendor
    Mitsubishielectric
    Product
    Melsoft Iq Appportal
    Vendor
    Mitsubishielectric
    Product
    Melsoft Navigator
    Vendor
    Mitsubishielectric
    Product
    Mi Configurator
    Vendor
    Mitsubishielectric
    Product
    Motion Control Setting
    Vendor
    Mitsubishielectric
    Product
    Mr Configurator2
    Vendor
    Mitsubishielectric
    Product
    Mt Works2
    Vendor
    Mitsubishielectric
    Product
    Rt Toolbox2
    Vendor
    Mitsubishielectric
    Product
    Rt Toolbox3

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-26314 (CVSS 7.8) — Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privi…
    CVE-2024-22104 (CVSS 5.5) — Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows b…
    CVE-2024-22105 (CVSS 5.5) — Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windo…
    CVE-2024-22106 (CVSS 7.8) — Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, …
    CVE-2024-25087 (CVSS 5.5) — Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windo…
    CVE-2024-25088 (CVSS 7.8) — Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges a…
    CVE-2023-51778 (CVSS 5.5) — Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows b…
    CVE-2024-22102 (CVSS 5.5) — Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windo…
    CVE-2024-25086 (CVSS 7.8) — Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges a…
    CVE-2023-51776 (CVSS 7.8) — Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High