HIGH🇵🇱 Wersja polska

CVE-2021-20591

CVSS 7.5v3.1pub. 2021-06-11upd. 2024-11-21

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Mitsubishielectric R00cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R00cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R01cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R01cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R02cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R02cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R04cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R04cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R08cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R08cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R08pcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R08pcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R08psfcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R08psfcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R08sfcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R08sfcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R120cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R120cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R120pcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R120pcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R120psfcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R120psfcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R120sfcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R120sfcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R16cpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R16cpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R16pcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R16pcpu Firmware
OS
Mitsubishielectric
all versions
Mitsubishielectric R16psfcpu
HW
Mitsubishielectric
all versions
Mitsubishielectric R16psfcpu Firmware
OS
Mitsubishielectric
all versions

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

Auth BypassDoS

CWE

References

jvn.jp/vu/JVNVU98060539/index.html…

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2…

jvn.jp/vu/JVNVU98060539/index.html…

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2…

Related vulnerabilities

CVE-2021-20599CRITICAL9.1PL ✓same product

Podatność na przechwycenie danych uwierzytelniających w sterownikach MELSEC iQ-R

CVE-2021-20597CRITICAL9.1PL ✓same product

Niechronione dane uwierzytelniające w sterownikach Mitsubishi Electric MELSEC iQ-R

CVE-2021-20594HIGH7.5same product

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R se...

CVE-2020-16850HIGH7.5same product

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial p...

CVE-2020-5668HIGH7.5same product

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '...