PT-2021-14063 · Mitsubishi · Melsec Iq-R Series Cpu Modules

Published 2021-06-11 · Updated 2021-06-22 · CVE-2021-20591

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MELSEC iQ-R series CPU modules versions R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series CPU modules versions R04/08/16/32/120(EN)CPU all versions Mitsubishi Electric MELSEC iQ-R series CPU modules versions R08/16/32/120SFCPU all versions Mitsubishi Electric MELSEC iQ-R series CPU modules versions R08/16/32/120PCPU all versions Mitsubishi Electric MELSEC iQ-R series CPU modules versions R08/16/32/120PSFCPU all versions

Description: The issue allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-20591

Affected Products

Melsec Iq-R Series Cpu Modules

References · 5

• https://mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-003_en.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20591 · Security Note
• https://t.me/cvenotify/16213 · Telegram Post
• https://t.me/cvenotify/16688 · Telegram Post
• https://jvn.jp/vu/JVNVU98060539/index.html · Note