CVEvulnerability

CVE-2021-20591

7.5 HIGH Published 2021-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400

Description

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition.

Affected configurations

• mitsubishielectric r00cpu firmware • mitsubishielectric r01cpu firmware • mitsubishielectric r02cpu firmware • mitsubishielectric r04cpu firmware • mitsubishielectric r08cpu firmware • mitsubishielectric r16cpu firmware • mitsubishielectric r32cpu firmware • mitsubishielectric r120cpu firmware • mitsubishielectric r08sfcpu firmware • mitsubishielectric r16sfcpu firmware • mitsubishielectric r32sfcpu firmware • mitsubishielectric r120sfcpu firmware • mitsubishielectric r08pcpu firmware • mitsubishielectric r16pcpu firmware • mitsubishielectric r32pcpu firmware • mitsubishielectric r120pcpu firmware • mitsubishielectric r08psfcpu firmware • mitsubishielectric r16psfcpu firmware • mitsubishielectric r32psfcpu firmware • mitsubishielectric r120psfcpu firmware

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References