Details of VAR-201902-0127

ID

VAR-201902-0127

CVE

CVE-2019-6535

TITLE

plural Mitsubishi Electric Q Vulnerability related to resource depletion in series products

Trust: 0.8

sources: JVNDB: JVNDB-2019-001917

DESCRIPTION

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash. plural Mitsubishi Electric Q Series products are vulnerable to resource exhaustion.Service operation interruption (DoS) There is a possibility of being put into a state. Mitsubishi Electric MELSEC-Q Series PLCs are prone to an remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Misubishi Electric Q03UDVCPU, etc. are all PLC (programmable logic controller) products of Japan's Mitsubishi Electric (Misubishi Electric) company. Security flaws exist in several Misubishi products. A remote attacker could exploit this vulnerability by sending a specially crafted packet to cause Ethernet to stop communicating. The following products are affected: Misubishi Q03UDVCPU; Q04UDVCPU; Q06UDVCPU; Q13UDVCPU; Q26UDPVCPU; Q03UDECPU;

Trust: 1.98

sources: NVD: CVE-2019-6535 // JVNDB: JVNDB-2019-001917 // BID: 106771 // VULHUB: VHN-157970

AFFECTED PRODUCTS

vendor:	mitsubishielectric	model:	q50udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q26udpvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q04udvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q04udpvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q13udpvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q04udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q26udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q10udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q06udvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q20udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q03udvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q06udpvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q13udvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q100udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q26udvcpu	scope:	lte	version:	20081	Trust: 1.0
vendor:	mitsubishielectric	model:	q13udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q03udecpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishielectric	model:	q06udehcpu	scope:	lte	version:	20101	Trust: 1.0
vendor:	mitsubishi electric	model:	q03udecpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q03udvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q04udpvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q04udvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q06udpvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q06udvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q13udpvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q13udvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q26udpvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi electric	model:	q26udvcpu	scope:	-	version:	-	Trust: 0.8
vendor:	mitsubishi	model:	electric q04/06/13/26udpvcpu	scope:	eq	version:	20081	Trust: 0.3
vendor:	mitsubishi	model:	electric q04/06/10/13/20/26/50/100udehcpu	scope:	eq	version:	20101	Trust: 0.3
vendor:	mitsubishi	model:	electric q03udecpu	scope:	eq	version:	20101	Trust: 0.3
vendor:	mitsubishi	model:	electric q03/04/06/13/26udvcpu	scope:	eq	version:	20081	Trust: 0.3

sources: BID: 106771 // JVNDB: JVNDB-2019-001917 // NVD: CVE-2019-6535

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-6535
value:	HIGH
Trust: 1.0
NVD:	CVE-2019-6535
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201901-973
value:	HIGH
Trust: 0.6
VULHUB:	VHN-157970
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2019-6535
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-157970
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-6535
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2019-6535
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-157970 // JVNDB: JVNDB-2019-001917 // CNNVD: CNNVD-201901-973 // NVD: CVE-2019-6535

PROBLEMTYPE DATA

problemtype:

CWE-400

Trust: 1.9

sources: VULHUB: VHN-157970 // JVNDB: JVNDB-2019-001917 // NVD: CVE-2019-6535

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201901-973

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201901-973

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-001917

PATCH

title:	MELSEC-Qシリーズ	url:	https://www.mitsubishielectric.co.jp/fa/products/cnt/plcq/items/index.html	Trust: 0.8
title:	Multiple Misubishi Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=89040	Trust: 0.6

sources: JVNDB: JVNDB-2019-001917 // CNNVD: CNNVD-201901-973

EXTERNAL IDS

db:	NVD	id:	CVE-2019-6535	Trust: 2.8
db:	ICS CERT	id:	ICSA-19-029-02	Trust: 2.8
db:	BID	id:	106771	Trust: 2.0
db:	JVNDB	id:	JVNDB-2019-001917	Trust: 0.8
db:	CNNVD	id:	CNNVD-201901-973	Trust: 0.7
db:	SEEBUG	id:	SSVID-98808	Trust: 0.1
db:	VULHUB	id:	VHN-157970	Trust: 0.1

sources: VULHUB: VHN-157970 // BID: 106771 // JVNDB: JVNDB-2019-001917 // CNNVD: CNNVD-201901-973 // NVD: CVE-2019-6535

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-19-029-02	Trust: 2.8
url:	http://www.securityfocus.com/bid/106771	Trust: 2.3
url:	https://nvd.nist.gov/vuln/detail/cve-2019-6535	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6535	Trust: 0.8
url:	http://www.mitsubishi-automation.com/	Trust: 0.3

sources: VULHUB: VHN-157970 // BID: 106771 // JVNDB: JVNDB-2019-001917 // CNNVD: CNNVD-201901-973 // NVD: CVE-2019-6535

CREDITS

Tri Quach of Amazon???s Customer Fulfillment Technology Security (CFTS),Tri Quach of Amazon???s Customer Fulfillment Technology Security (CFTS)

Trust: 0.6

sources: CNNVD: CNNVD-201901-973

SOURCES

db:	VULHUB	id:	VHN-157970
db:	BID	id:	106771
db:	JVNDB	id:	JVNDB-2019-001917
db:	CNNVD	id:	CNNVD-201901-973
db:	NVD	id:	CVE-2019-6535

LAST UPDATE DATE

2024-08-14T15:07:44.907000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-157970	date:	2023-01-31T00:00:00
db:	BID	id:	106771	date:	2019-01-29T00:00:00
db:	JVNDB	id:	JVNDB-2019-001917	date:	2019-03-29T00:00:00
db:	CNNVD	id:	CNNVD-201901-973	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2019-6535	date:	2023-01-31T21:03:58.657

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-157970	date:	2019-02-05T00:00:00
db:	BID	id:	106771	date:	2019-01-29T00:00:00
db:	JVNDB	id:	JVNDB-2019-001917	date:	2019-03-29T00:00:00
db:	CNNVD	id:	CNNVD-201901-973	date:	2019-01-30T00:00:00
db:	NVD	id:	CVE-2019-6535	date:	2019-02-05T19:29:00.243