CVE Vulnerabilities

CVE-2020-16226

Predictable Exact Value from Previous Values

Published: Oct 05, 2020 | Modified: Oct 22, 2020
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

Weakness

An exact value or random number can be precisely predicted by observing previous values.

Affected Software

Name Vendor Start Version End Version
Qj71mes96_firmware Mitsubishielectric * *

Potential Mitigations

References