CVE-2020-16850

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

• CWE-20
• CWE-400

• https://blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-seriesThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-282-02Third Party Advisory, US Government Resource
• https://blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-seriesThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-282-02Third Party Advisory, US Government Resource

Published

Nov 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16844In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, w…6.8
• CVE-2020-16845Go before 1.13.15 and 14.x before 1.14.7 can have an infinit…7.5
• CVE-2020-16846An issue was discovered in SaltStack Salt through 3002. Send…9.8
• CVE-2020-16847Extreme Analytics in Extreme Management Center before 8.5.0.…6.1
• CVE-2020-16849An issue was discovered on Canon MF237w 06.07 devices. An "I…7.5
• CVE-2020-1685When configuring stateless firewall filters in Juniper Netwo…5.8
• CVE-2020-16851<p>An elevation of privilege vulnerability exists when the O…7.1
• CVE-2020-16852<p>An elevation of privilege vulnerability exists when the O…7.1
• CVE-2020-16853<p>An elevation of privilege vulnerability exists when the O…7.1
• CVE-2020-16854<p>An information disclosure vulnerability exists when the W…5.5
• CVE-2020-16855<p>An information disclosure vulnerability exists when Micro…5.5
• CVE-2020-16856<p>A remote code execution vulnerability exists in Visual St…7.8