Security readout for executives and security teams
Plain-English summary
CVE-2020-5668 affects Mitsubishi Electric MELSEC iQ-R modules used in industrial control environments. A remote unauthenticated attacker could trigger denial of service with a specially crafted SLMP packet, disrupting CPU program execution or communications. The provided sources do not include a CVSS score or confirmed exploitation.
Executive priority
Treat this as a high operational availability risk if affected modules are reachable. Even without confirmed exploitation, unauthenticated remote DoS against industrial controllers can interrupt production or communications, so asset validation and vendor-guided remediation should be prioritized.
Technical view
The CVE describes uncontrolled resource consumption in listed MELSEC iQ-R CPU and communication modules. A crafted SLMP packet can cause an error in a CPU unit, stopping program execution and communication, or disrupt communication through the affected unit. Affected firmware thresholds are explicitly listed in the CVE record.
Likely exposure
Exposure is most likely where affected MELSEC iQ-R modules run firmware at or below the listed versions and SLMP traffic can reach them from untrusted or poorly segmented networks.
Exploitation context
The source bundle supports remote unauthenticated denial of service via crafted SLMP packets. It does not show CISA KEV listing, active exploitation, public exploit availability, or ransomware use.
Researcher notes
Evidence is limited to the CVE bundle and referenced advisories. The bundle names affected firmware thresholds and the SLMP DoS condition, but provides no CVSS vector, CWE, exploit telemetry, or specific fixed versions in the supplied text.
Mitigation direction
- Check Mitsubishi Electric advisory 2020-016 for fixed firmware and vendor-approved mitigations.
- Identify affected MELSEC iQ-R models and compare firmware against the listed vulnerable thresholds.
- Prioritize remediation for systems supporting safety, production continuity, or remote operations.
- Restrict SLMP exposure only through approved OT network controls and vendor guidance.
- Track CISA, JVN, and Mitsubishi Electric updates for revised remediation guidance.
Validation and detection
- Inventory MELSEC iQ-R CPU and communication modules in OT environments.
- Record exact model numbers and firmware versions for each module.
- Confirm whether SLMP traffic can reach affected modules from untrusted networks.
- Review monitoring for unexplained CPU unit errors or communication outages.
- Document compensating controls and remediation decisions for operational risk owners.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2020-5668 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-016.pdfCVE reference · x_refsource_MISC
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-016_en.pdfCVE reference · x_refsource_MISC
- https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05CVE reference · x_refsource_MISC
- https://jvn.jp/vu/JVNVU95980140/index.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.