CVE-2020-13238

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production.

• CWE-400

• http://jvn.jp/vu/JVNVU97662844/index.htmlThird Party Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-001_en.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-161-02Third Party Advisory, US Government Resource
• http://jvn.jp/vu/JVNVU97662844/index.htmlThird Party Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-001_en.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-161-02Third Party Advisory, US Government Resource

Published

Jun 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13227An issue was discovered in Sysax Multi Server 6.90. An attac…5.3
• CVE-2020-13228An issue was discovered in Sysax Multi Server 6.90. There is…6.1
• CVE-2020-13229An issue was discovered in Sysax Multi Server 6.90. A sessio…8.8
• CVE-2020-1323An open redirect vulnerability exists in Microsoft SharePoin…6.1
• CVE-2020-13230In Cacti before 1.2.11, disabling a user account does not im…4.3
• CVE-2020-13231In Cacti before 1.2.11, auth_profile.php?action=edit allows …6.5
• CVE-2020-13239The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded …5.4
• CVE-2020-1324An elevation of privilege (user to user) vulnerability exist…7.8
• CVE-2020-13240The DMS/ECM module in Dolibarr 11.0.4 allows users with the …5.4
• CVE-2020-13241Microweber 1.1.18 allows Unrestricted File Upload because ad…7.8
• CVE-2020-13245Certain NETGEAR devices are affected by Missing SSL Certific…5.9
• CVE-2020-13246An issue was discovered in Gitea through 1.11.5. An attacker…7.5