{"id":"CVE-2019-6535","aliases":["EUVD-2019-16094","GHSA-6j5w-96r9-mm4v"],"status":"published","title":"Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion","description":"Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.04274,"percentile":0.91173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2019-02-05T19:00:00Z","modified":"2026-06-17T02:39:12Z","products":[{"vendor":"mitsubishi electric","product":"q03/04/06/13/26udvcpu"},{"vendor":"mitsubishi electric","product":"q03udecpu, q04/06/10/13/20/26/50/100udehcpu"},{"vendor":"mitsubishi electric","product":"q04/06/13/26udpvcpu"},{"vendor":"mitsubishielectric","product":"q03udecpu_firmware"},{"vendor":"mitsubishielectric","product":"q03udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q04udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q04udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q04udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q100udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q10udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q13udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q13udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q13udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q20udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q26udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q26udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q26udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q50udehcpu_firmware"}],"references":[{"url":"http://www.securityfocus.com/bid/106771","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-19-029-02","tags":["x_refsource_MISC"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-029-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6535"},{"url":"https://github.com/advisories/GHSA-6j5w-96r9-mm4v"}],"sources":{"cve":[{"id":"CVE-2019-6535","title":"Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion","description":"Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.","status":"published","published":"2019-02-05T19:00:00Z","modified":"2025-06-26T17:08:15.995Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-16094","description":"Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.","status":"published","published":"2019-02-05T19:00:00Z","modified":"2025-06-26T17:08:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:16.171648Z"}],"ghsa":[{"id":"GHSA-6j5w-96r9-mm4v","title":"Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU:...","description":"Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash.","status":"published","published":"2022-05-13T01:31:13Z","modified":"2025-06-26T18:32:25Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:02:49.372577Z"}],"nvd":[{"id":"CVE-2019-6535","description":"Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.","status":"published","published":"2019-02-05T19:29:00.243Z","modified":"2026-06-17T02:39:12.607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:05:04.689371Z"}]}}