CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service (DoS) condition on program execution and communication by sending a specially crafted ARP packet.

• https://jvn.jp/vu/JVNVU95638588/index.htmlThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdfVendor Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU95638588/index.htmlThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdfVendor Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdfVendor Advisory

Published

Dec 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5657Improper neutralization of argument delimiters in a command …6.5
• CVE-2020-5658Resource Management Errors vulnerability in TCP/IP function …7.5
• CVE-2020-5659SQL injection vulnerability in the XooNIps 3.49 and earlier …8.8
• CVE-2020-5662Reflected cross-site scripting vulnerability in XooNIps 3.49…5.4
• CVE-2020-5663Stored cross-site scripting vulnerability in XooNIps 3.49 an…5.4
• CVE-2020-5664Deserialization of untrusted data vulnerability in XooNIps 3…9.8
• CVE-2020-5666Uncontrolled resource consumption vulnerability in MELSEC iQ…7.5
• CVE-2020-5667Studyplus App for Android v6.3.7 and earlier and Studyplus A…5.5
• CVE-2020-5668Uncontrolled resource consumption vulnerability in MELSEC iQ…7.5
• CVE-2020-5669Cross-site scripting vulnerability in Movable Type Movable T…5.4
• CVE-2020-5674Untrusted search path vulnerability in the installers of mul…7.8
• CVE-2020-5675Out-of-bounds read vulnerability in GT21 model of GOT2000 se…7.5