CVE-2020-5668

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU firmware version '06' and earlier, RJ71EN71 firmware version '47' and earlier, RJ71GF11-T2 firmware version '47' and earlier, RJ72GF15-T2 firmware version '07' and earlier, RJ71GP21-SX firmware version '47' and earlier, RJ71GP21S-SX firmware version '47' and earlier, and RJ71GN11-T2 firmware version '11' and earlier) allows a remote unauthenticated attacker to cause an error in a CPU unit and cause a denial-of-service (DoS) condition in execution of the program and its communication, or to cause a denial-of-service (DoS) condition in communication via the unit by receiving a specially crafted SLMP packet

• CWE-400

• https://jvn.jp/vu/JVNVU95980140/index.htmlThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdfVendor Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU95980140/index.htmlThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdfVendor Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdfVendor Advisory

Published

Nov 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5662Reflected cross-site scripting vulnerability in XooNIps 3.49…5.4
• CVE-2020-5663Stored cross-site scripting vulnerability in XooNIps 3.49 an…5.4
• CVE-2020-5664Deserialization of untrusted data vulnerability in XooNIps 3…9.8
• CVE-2020-5665Improper check or handling of exceptional conditions in MELS…7.4
• CVE-2020-5666Uncontrolled resource consumption vulnerability in MELSEC iQ…7.5
• CVE-2020-5667Studyplus App for Android v6.3.7 and earlier and Studyplus A…5.5
• CVE-2020-5669Cross-site scripting vulnerability in Movable Type Movable T…5.4
• CVE-2020-5674Untrusted search path vulnerability in the installers of mul…7.8
• CVE-2020-5675Out-of-bounds read vulnerability in GT21 model of GOT2000 se…7.5
• CVE-2020-5676GROWI v4.1.3 and earlier allow remote attackers to obtain in…7.5
• CVE-2020-5677Reflected cross-site scripting vulnerability in GROWI v4.0.0…6.1
• CVE-2020-5678Stored cross-site scripting vulnerability in GROWI v3.8.1 an…6.1