CVE-2021-20591
Description
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric r00cpu_firmware | No range specified | — |
| mitsubishielectric r01cpu_firmware | No range specified | — |
| mitsubishielectric r02cpu_firmware | No range specified | — |
| mitsubishielectric r04cpu_firmware | No range specified | — |
| mitsubishielectric r08cpu_firmware | No range specified | — |
| mitsubishielectric r16cpu_firmware | No range specified | — |
| mitsubishielectric r32cpu_firmware | No range specified | — |
| mitsubishielectric r120cpu_firmware | No range specified | — |
| mitsubishielectric r08sfcpu_firmware | No range specified | — |
| mitsubishielectric r16sfcpu_firmware | No range specified | — |
| mitsubishielectric r32sfcpu_firmware | No range specified | — |
| mitsubishielectric r120sfcpu_firmware | No range specified | — |
| mitsubishielectric r08pcpu_firmware | No range specified | — |
| mitsubishielectric r16pcpu_firmware | No range specified | — |
| mitsubishielectric r32pcpu_firmware | No range specified | — |
| mitsubishielectric r120pcpu_firmware | No range specified | — |
| mitsubishielectric r08psfcpu_firmware | No range specified | — |
| mitsubishielectric r16psfcpu_firmware | No range specified | — |
| mitsubishielectric r32psfcpu_firmware | No range specified | — |
| mitsubishielectric r120psfcpu_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.