CVE-2021-20586

High

Description

Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with R16RTCPU" of RV-*FR***-R-* all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU" of RH-*FRHR***-R-* all versions, controller "CR800-*V*Q with Q172DSRCPU" of RV-*FR***-Q-* all versions, controller "CR800-*HQ with Q172DSRCPU" of RH-*FRH***-Q-* all versions, controller "CR800-*HRQ with Q172DSRCPU" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.

SeverityHigh
CVSS7.5
Exploit probability—
ProductMitsubishielectric Rv2fr Firmware
PublishedJan 29, 2021
First seenJan 29, 2021

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mitsubishielectric rv2fr_firmwareNo range specified—
mitsubishielectric rv2frl_firmwareNo range specified—
mitsubishielectric rv4fr_firmwareNo range specified—
mitsubishielectric rv4frl_firmwareNo range specified—
mitsubishielectric rv7fr_firmwareNo range specified—
mitsubishielectric rv7frl_firmwareNo range specified—
mitsubishielectric rv7frll_firmwareNo range specified—
mitsubishielectric rv13fr_firmwareNo range specified—
mitsubishielectric rv13frl_firmwareNo range specified—
mitsubishielectric rv20fr_firmwareNo range specified—
mitsubishielectric rh1frhr_firmwareNo range specified—
mitsubishielectric rh3frhr_firmwareNo range specified—
mitsubishielectric rh3frh35_firmwareNo range specified—
mitsubishielectric rh3frh45_firmwareNo range specified—
mitsubishielectric rh3frh55_firmwareNo range specified—
mitsubishielectric rh6frh35_firmwareNo range specified—
mitsubishielectric rh6frh45_firmwareNo range specified—
mitsubishielectric rh6frh55_firmwareNo range specified—
mitsubishielectric rh12frh55_firmwareNo range specified—
mitsubishielectric rh12rfh70_firmwareNo range specified—
mitsubishielectric rh12frh85_firmwareNo range specified—
mitsubishielectric rh20frh85_firmwareNo range specified—
mitsubishielectric rh20frh100_firmwareNo range specified—
mitsubishielectric rv2fr\(b\)_firmwareNo range specified—
mitsubishielectric rv2frl\(b\)_firmwareNo range specified—
mitsubishielectric rv4frm\/c_firmwareNo range specified—
mitsubishielectric rv4frlm\/c_firmwareNo range specified—
mitsubishielectric rv7frm\/c_firmwareNo range specified—
mitsubishielectric rv7frlm\/c_firmwareNo range specified—
mitsubishielectric rv7frllm\/c_firmwareNo range specified—
mitsubishielectric rv13frm\/c_firmwareNo range specified—
mitsubishielectric rv13frlm\/c_firmwareNo range specified—
mitsubishielectric rv20frm\/c_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-20586 · Mitsubishielectric Rv2fr Firmware · Dark Radar