CVE-2021-20611
Description
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishi melsec_iq-r_r00_cpu_firmware | v ≤ 24 | — |
| mitsubishi melsec_iq-r_r01_cpu_firmware | v ≤ 24 | — |
| mitsubishi melsec_iq-r_r02_cpu_firmware | v ≤ 24 | — |
| mitsubishi melsec_iq-r_r04_cpu_firmware | v ≤ 57 | — |
| mitsubishi melsec_iq-r_r08_cpu_firmware | v ≤ 57, No range specified | — |
| mitsubishi melsec_iq-r_r120_cpu_firmware | v ≤ 57, No range specified | — |
| mitsubishi melsec_iq-r_r16_cpu_firmware | v ≤ 57, No range specified | — |
| mitsubishi melsec_iq-r_r32_cpu_firmware | v ≤ 57, No range specified | — |
| mitsubishi melsec_iq-r_r04_pcpu_firmware | v ≤ 29 | — |
| mitsubishi melsec_iq-r_r08_pcpu_firmware | v ≤ 29 | — |
| mitsubishi melsec_iq-r_r16_pcpu_firmware | v ≤ 29 | — |
| mitsubishi melsec_iq-r_r32_pcpu_firmware | v ≤ 29 | — |
| mitsubishi melsec_iq-r_r120_pcpu_firmware | v ≤ 29 | — |
| mitsubishi melsec_iq-r_r08_sfcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r16_sfcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r32_sfcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r120_sfcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r16_mtcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r32_mtcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r64_mtcpu_firmware | No range specified | — |
| mitsubishi melsec_iq-r_r12_ccpu-v_firmware | No range specified | — |
| mitsubishi melsec_q03udecpu_firmware | No range specified | — |
| mitsubishi melsec_q04udecpu_firmware | No range specified | — |
| mitsubishi melsec_q06udecpu_firmware | No range specified | — |
| mitsubishi melsec_q10udecpu_firmware | No range specified | — |
| mitsubishi melsec_q13udecpu_firmware | No range specified | — |
| mitsubishi melsec_q20udecpu_firmware | No range specified | — |
| mitsubishi melsec_q26udecpu_firmware | No range specified | — |
| mitsubishi melsec_q50udecpu_firmware | No range specified | — |
| mitsubishi melsec_q100udecpu_firmware | No range specified | — |
| mitsubishi melsec_q03udvcpu_firmware | No range specified | — |
| mitsubishi melsec_q04udvcpu_firmware | No range specified | — |
| mitsubishi melsec_q06udvcpu_firmware | No range specified | — |
| mitsubishi melsec_q13udvcpu_firmware | No range specified | — |
| mitsubishi melsec_q26udvcpu_firmware | No range specified | — |
| mitsubishi melsec_q04udpvcpu_firmware | No range specified | — |
| mitsubishi melsec_q06udpvcpu_firmware | No range specified | — |
| mitsubishi melsec_q13udpvcpu_firmware | No range specified | — |
| mitsubishi melsec_q26udpvcpu_firmware | No range specified | — |
| mitsubishi melsec_q12dccpu-v_firmware | No range specified | — |
| mitsubishi melsec_q24dhccpu-v\(g\)_firmware | No range specified | — |
| mitsubishi melsec_q24dhccpu-ls_firmware | No range specified | — |
| mitsubishi melsec_q26dhccpu-ls_firmware | No range specified | — |
| mitsubishi melsec_mr-mq100_firmware | No range specified | — |
| mitsubishi melsec_q172dcpu-s1_firmware | No range specified | — |
| mitsubishi melsec_q173dcpu-s1_firmware | No range specified | — |
| mitsubishi melsec_q172dscpu_firmware | No range specified | — |
| mitsubishi melsec_q173dscpu_firmware | No range specified | — |
| mitsubishi melsec_q170mscpu\(-s1\)_firmware | No range specified | — |
| mitsubishi melsec_q170mcpu_firmware | No range specified | — |
| mitsubishi melipc_mi5122-vw_firmware | No range specified | — |
| mitsubishi melsec_l26cpu-\(p\)bt_firmware | No range specified | — |
| mitsubishi melsec_l26cpu\(-p\)_firmware | No range specified | — |
| mitsubishi melsec_l06cpu\(-p\)_firmware | No range specified | — |
| mitsubishi melsec_l02cpu\(-p\)_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.