CVE-2020-16850

—

CVSS 3.1

7.5 high

EPSS

2%p81

Published

Nov 30, 2020 (Nov 30, 2020)

Modified

Jun 17, 2026

Description

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

Vendors: mitsubishielectric
Products: r00cpu firmware, r01cpu firmware, r02cpu firmware, r04cpu firmware, r08cpu firmware, r16cpu firmware, r32cpu firmware, r120cpu firmware, r08sfcpu firmware, r16sfcpu firmware, r32sfcpu firmware, r120sfcpu firmware
Weakness: CWE-20, CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.