CVE-2020-5544 - Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet

Back Back to CVE browser

CRITICAL

Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet

Published Mar 16, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.42%

Description

Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.

Affected products

Vendor Mitsubishi Electric Corporation Product Mitsubishi Electric MELQIC IU1 series Default
n/a
- Version
  IU1-1M20-D firmware version 1.0.7 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mitsubishi Electric Corporation

Mitsubishi Electric MELQIC IU1 series

n/a

Version	Status	Constraints
IU1-1M20-D firmware version 1.0.7 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (2)

https://jvn.jp/en/vu/JVNVU92370624/index.html
x_refsource_MISCThird Party Advisory
https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://jvn.jp/en/vu/JVNVU92370624/index.html		x_refsource_MISCThird Party Advisory
https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf		x_refsource_MISCPatchVendor Advisory