high7.5
CVE-2019-6535
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26…
Impact
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Q03udvcpu Firmware | through 20081 |
| Mitsubishielectric | Q04udvcpu Firmware | through 20081 |
| Mitsubishielectric | Q06udvcpu Firmware | through 20081 |
| Mitsubishielectric | Q13udvcpu Firmware | through 20081 |
| Mitsubishielectric | Q26udvcpu Firmware | through 20081 |
| Mitsubishielectric | Q04udpvcpu Firmware | through 20081 |
| Mitsubishielectric | Q06udpvcpu Firmware | through 20081 |
| Mitsubishielectric | Q13udpvcpu Firmware | through 20081 |
| Mitsubishielectric | Q26udpvcpu Firmware | through 20081 |
| Mitsubishielectric | Q03udecpu Firmware | through 20101 |
| Mitsubishielectric | Q04udehcpu Firmware | through 20101 |
| Mitsubishielectric | Q06udehcpu Firmware | through 20101 |