PT-2019-18147 · Mitsubishi · Mitsubishi Electric Q26Udehcpu+8

Tri Quach · Published 2019-02-05 · Updated 2025-06-26 · CVE-2019-6535

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Q03UDVCPU versions serial number 20081 and prior Mitsubishi Electric Q04UDVCPU versions serial number 20081 and prior Mitsubishi Electric Q06UDVCPU versions serial number 20081 and prior Mitsubishi Electric Q13UDVCPU versions serial number 20081 and prior Mitsubishi Electric Q26UDVCPU versions serial number 20081 and prior Mitsubishi Electric Q03UDECPU versions serial number 20101 and prior Mitsubishi Electric Q04UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q06UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q10UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q13UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q20UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q26UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q50UDEHCPU versions serial number 20101 and prior Mitsubishi Electric Q100UDEHCPU versions serial number 20101 and prior

Description A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash.

Recommendations For Mitsubishi Electric Q03UDVCPU versions serial number 20081 and prior, update to a version with a serial number later than 20081. For Mitsubishi Electric Q04UDVCPU versions serial number 20081 and prior, update to a version with a serial number later than 20081. For Mitsubishi Electric Q06UDVCPU versions serial number 20081 and prior, update to a version with a serial number later than 20081. For Mitsubishi Electric Q13UDVCPU versions serial number 20081 and prior, update to a version with a serial number later than 20081. For Mitsubishi Electric Q26UDVCPU versions serial number 20081 and prior, update to a version with a serial number later than 20081. For Mitsubishi Electric Q03UDECPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q04UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q06UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q10UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q13UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q20UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q26UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q50UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101. For Mitsubishi Electric Q100UDEHCPU versions serial number 20101 and prior, update to a version with a serial number later than 20101.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2019-6535

Affected Products

Mitsubishi Electric Q03Udecpu

Mitsubishi Electric Q04Udehcpu

Mitsubishi Electric Q06Udehcpu

Mitsubishi Electric Q100Udehcpu

Mitsubishi Electric Q10Udehcpu

Mitsubishi Electric Q13Udehcpu

Mitsubishi Electric Q20Udehcpu

Mitsubishi Electric Q26Udehcpu

Mitsubishi Electric Q50Udehcpu

References · 7

• https://osv.dev/vulnerability/CVE-2019-6535 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6535 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-029-02 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-19-029-02 · Note
• https://t.me/cvenotify/126766 · Telegram Post
• https://t.me/cvenotify/126773 · Telegram Post
• http://securityfocus.com/bid/106771 · Note