CVE-2021-20609

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://jvn.jp/vu/JVNVU94434051/index.html	Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02	Third Party Advisory US Government Resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r00_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r00_cpu:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r01_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r01_cpu:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r02_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r02_cpu:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r04_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r04_cpu:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r04_pcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r04_pcpu:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r08_pcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r08_pcpu:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r16_pcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r16_pcpu:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r32_pcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r32_pcpu:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r120_pcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r120_pcpu:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r08_sfcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r08_sfcpu:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r16_sfcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r16_sfcpu:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r32_sfcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r32_sfcpu:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r120_sfcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r120_sfcpu:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r16_mtcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r16_mtcpu:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r32_mtcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r32_mtcpu:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r64_mtcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r64_mtcpu:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r12_ccpu-v_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r12_ccpu-v:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q03udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q03udecpu:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q04udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q04udecpu:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q06udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q06udecpu:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q10udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q10udecpu:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q13udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q13udecpu:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q20udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q20udecpu:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q26udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q26udecpu:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q50udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q50udecpu:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q100udecpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q100udecpu:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q03udvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q03udvcpu:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q04udvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q04udvcpu:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q06udvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q06udvcpu:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q13udvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q13udvcpu:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q26udvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q26udvcpu:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q04udpvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q04udpvcpu:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q06udpvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q06udpvcpu:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q13udpvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q13udpvcpu:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q26udpvcpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q26udpvcpu:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q12dccpu-v_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q12dccpu-v:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q24dhccpu-v\(g\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q24dhccpu-v\(g\):-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q24dhccpu-ls_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q24dhccpu-ls:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q26dhccpu-ls_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q26dhccpu-ls:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_mr-mq100_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_mr-mq100:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q172dcpu-s1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q172dcpu-s1:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q173dcpu-s1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q173dcpu-s1:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q172dscpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q172dscpu:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q173dscpu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q173dscpu:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q170mscpu\(-s1\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q170mscpu\(-s1\):-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_q170mcpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_q170mcpu:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND

cpe:2.3:o:mitsubishi:melipc_mi5122-vw_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melipc_mi5122-vw:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_l26cpu-\(p\)bt_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_l26cpu-\(p\)bt:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_l26cpu\(-p\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_l26cpu\(-p\):-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_l06cpu\(-p\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_l06cpu\(-p\):-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_l02cpu\(-p\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_l02cpu\(-p\):-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:*:*:*:*:*:*:*:*

Configuration 57 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND

cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:*:*:*:*:*:*:*

History

09 Nov 2023, 09:15

Type	Values Removed	Values Added
Summary	Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "28" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V Firmware versions "16" and prior, Mitsubishi Electric MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DSCPU All versions, Mitsubishi Electric MELSEC Q Series Q170MCPU Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q170MSCPU(-S1) All versions, Mitsubishi Electric MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and Mitsubishi Electric MELIPC Series MI5122-VW Firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.	Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

24 Nov 2022, 06:15

Type	Values Removed	Values Added
Summary	Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU All versions, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V Firmware versions "16" and prior, Mitsubishi Electric MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DSCPU All versions, Mitsubishi Electric MELSEC Q Series Q170MCPU Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q170MSCPU(-S1) All versions, Mitsubishi Electric MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and Mitsubishi Electric MELIPC Series MI5122-VW Firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.	Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "28" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V Firmware versions "16" and prior, Mitsubishi Electric MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DSCPU All versions, Mitsubishi Electric MELSEC Q Series Q170MCPU Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q170MSCPU(-S1) All versions, Mitsubishi Electric MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and Mitsubishi Electric MELIPC Series MI5122-VW Firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

26 Jul 2022, 15:15

Type	Values Removed	Values Added
Summary	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, MELSEC Q Series Q172/173DSCPU All versions, MELSEC Q Series Q170MCPU Operating system software version "W" and prior, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.	Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU All versions, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V Firmware versions "16" and prior, Mitsubishi Electric MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, Mitsubishi Electric MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, Mitsubishi Electric MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q172/173DSCPU All versions, Mitsubishi Electric MELSEC Q Series Q170MCPU Operating system software version "W" and prior, Mitsubishi Electric MELSEC Q Series Q170MSCPU(-S1) All versions, Mitsubishi Electric MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, Mitsubishi Electric MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and Mitsubishi Electric MELIPC Series MI5122-VW Firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

02 Jun 2022, 14:15

Type	Values Removed	Values Added
Summary	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, MELSEC Q Series Q172/173DSCPU All versions, MELSEC Q Series Q170MCPU Operating system software version "W" and prior, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, MELSEC Q Series Q172/173DSCPU All versions, MELSEC Q Series Q170MCPU Operating system software version "W" and prior, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

26 Apr 2022, 19:15

Type	Values Removed	Values Added
Summary	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V All versions, MELSEC Q Series Q24DHCCPU-V(G) All versions, MELSEC Q Series Q24/26DHCCPU-LS All versions, MELSEC Q Series MR-MQ100 All versions, MELSEC Q Series Q172/173DCPU-S1 All versions, MELSEC Q Series Q172/173DSCPU All versions, MELSEC Q Series Q170MCPU All versions, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24DHCCPU-V(G) The first 5 digits of serial No. "24031" and prior, MELSEC Q Series Q24/26DHCCPU-LS The first 5 digits of serial No. "24031" and prior, MELSEC Q Series MR-MQ100 Operating system software version "F" and prior, MELSEC Q Series Q172/173DCPU-S1 Operating system software version "W" and prior, MELSEC Q Series Q172/173DSCPU All versions, MELSEC Q Series Q170MCPU Operating system software version "W" and prior, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

28 Jan 2022, 20:15

Type	Values Removed	Values Added
Summary	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU All versions, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU All versions, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V All versions, MELSEC Q Series Q24DHCCPU-V(G) All versions, MELSEC Q Series Q24/26DHCCPU-LS All versions, MELSEC Q Series MR-MQ100 All versions, MELSEC Q Series Q172/173DCPU-S1 All versions, MELSEC Q Series Q172/172DSCPU All versions, MELSEC Q Series Q170MCPU All versions, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) All versions, MELSEC L Series L26CPU-(P)BT All versions and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.	Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU The first 5 digits of serial No. "23121" and prior, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V All versions, MELSEC Q Series Q24DHCCPU-V(G) All versions, MELSEC Q Series Q24/26DHCCPU-LS All versions, MELSEC Q Series MR-MQ100 All versions, MELSEC Q Series Q172/173DCPU-S1 All versions, MELSEC Q Series Q172/173DSCPU All versions, MELSEC Q Series Q170MCPU All versions, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) The first 5 digits of serial No. "23121" and prior, MELSEC L Series L26CPU-(P)BT The first 5 digits of serial No. "23121" and prior and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

03 Dec 2021, 20:35

Type	Values Removed	Values Added
References	~~(MISC) https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf -~~	(MISC) https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf - Vendor Advisory
References	~~(MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02 -~~	(MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02 - Third Party Advisory, US Government Resource
References	~~(MISC) https://jvn.jp/vu/JVNVU94434051/index.html -~~	(MISC) https://jvn.jp/vu/JVNVU94434051/index.html - Third Party Advisory
CPE		cpe:2.3:o:mitsubishi:melsec_iq-r_r16_pcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r120_pcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r02_cpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r04_cpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_mr-mq100:-:::::::* cpe:2.3:o:mitsubishi:melsec_q26udpvcpu_firmware:-:::::::* cpe:2.3:o:mitsubishi:melsec_q06udpvcpu_firmware:-:::::::* cpe:2.3:h:mitsubishi:melsec_q06udecpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q100udecpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q172dscpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r16_sfcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r08_sfcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q172dcpu-s1:-:::::::* cpe:2.3:o:mitsubishi:melsec_q03udvcpu_firmware:-:::::::* cpe:2.3:o:mitsubishi:melsec_q170mcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r04_pcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q173dcpu-s1_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q173dscpu_firmware:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r04_cpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_l06cpu\(-p\)_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_l26cpu\(-p\)_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r08_sfcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:::::::: cpe:2.3:o:mitsubishi:melsec_q13udpvcpu_firmware:-:::::::* cpe:2.3:o:mitsubishi:melsec_q50udecpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q173dscpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q06udpvcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r12_ccpu-v_firmware:::::::: cpe:2.3:o:mitsubishi:melipc_mi5122-vw_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q170mcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_l26cpu-\(p\)bt:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r02_cpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q26udecpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q06udvcpu_firmware:-:::::::* cpe:2.3:h:mitsubishi:melsec_q04udpvcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_l02cpu\(-p\)_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q26dhccpu-ls_firmware:-:::::::* cpe:2.3:h:mitsubishi:melsec_q26dhccpu-ls:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r32_mtcpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_iq-r_r64_mtcpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q10udecpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q03udecpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q04udvcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q172dscpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_l26cpu-\(p\)bt_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_l02cpu\(-p\):-:::::::* cpe:2.3:h:mitsubishi:melsec_q03udvcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_l06cpu\(-p\):-:::::::* cpe:2.3:h:mitsubishi:melsec_q24dhccpu-ls:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r16_pcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q12dccpu-v_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q172dcpu-s1_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r00_cpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r01_cpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r00_cpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q26udpvcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q04udpvcpu_firmware:-:::::::* cpe:2.3:o:mitsubishi:melsec_q20udecpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_iq-r_r16_mtcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q50udecpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r12_ccpu-v:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r32_pcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q24dhccpu-v\(g\):-:::::::* cpe:2.3:o:mitsubishi:melsec_q24dhccpu-v\(g\)_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r16_mtcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r04_pcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q173dcpu-s1:-:::::::* cpe:2.3:h:mitsubishi:melsec_q170mscpu\(-s1\):-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q13udpvcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q04udecpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q26udecpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r32_pcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r64_mtcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q10udecpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r32_sfcpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_iq-r_r120_sfcpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q13udecpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q03udecpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q24dhccpu-ls_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_iq-r_r16_sfcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q13udvcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q13udecpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r120_pcpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q26udvcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r32_mtcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q04udvcpu_firmware:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r08_pcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_q20udecpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q100udecpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_mr-mq100_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r32_sfcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q170mscpu\(-s1\)_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q06udecpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_iq-r_r120_sfcpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r01_cpu_firmware:::::::: cpe:2.3:h:mitsubishi:melipc_mi5122-vw:-:::::::* cpe:2.3:h:mitsubishi:melsec_l26cpu\(-p\):-:::::::* cpe:2.3:o:mitsubishi:melsec_iq-r_r08_pcpu_firmware:::::::: cpe:2.3:o:mitsubishi:melsec_q04udecpu_firmware:::::::: cpe:2.3:h:mitsubishi:melsec_q06udvcpu:-:::::::* cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:::::::* cpe:2.3:o:mitsubishi:melsec_q26udvcpu_firmware:-:::::::* cpe:2.3:o:mitsubishi:melsec_q13udvcpu_firmware:-:::::::* cpe:2.3:h:mitsubishi:melsec_q12dccpu-v:-:::::::*
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 7.8 v3 : 7.5
CWE		CWE-400

01 Dec 2021, 16:19

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-12-01 16:15

Updated : 2023-12-10 14:09

NVD link : CVE-2021-20609

Mitre link : CVE-2021-20609

CVE.ORG link : CVE-2021-20609

JSON object : View

Products Affected

mitsubishi

melsec_iq-r_r32_sfcpu
melsec_q26dhccpu-ls
melsec_iq-r_r08_pcpu
melsec_q03udecpu
melsec_iq-r_r00_cpu
melsec_iq-r_r16_cpu_firmware
melsec_q06udvcpu
melsec_q170mcpu_firmware
melsec_q13udvcpu
melsec_iq-r_r02_cpu
melipc_mi5122-vw_firmware
melsec_q12dccpu-v
melsec_iq-r_r32_sfcpu_firmware
melsec_q06udpvcpu
melsec_iq-r_r16_pcpu_firmware
melsec_q10udecpu
melsec_q04udecpu
melsec_q173dcpu-s1_firmware
melsec_q04udpvcpu_firmware
melsec_iq-r_r120_cpu
melsec_q04udecpu_firmware
melsec_iq-r_r16_mtcpu
melsec_q03udvcpu
melsec_iq-r_r04_cpu_firmware
melsec_q12dccpu-v_firmware
melsec_q03udvcpu_firmware
melsec_iq-r_r32_pcpu
melsec_l26cpu-\(p\)bt_firmware
melsec_q04udvcpu
melsec_q172dcpu-s1
melsec_q04udvcpu_firmware
melsec_iq-r_r16_sfcpu_firmware
melsec_iq-r_r01_cpu
melsec_q13udecpu_firmware
melsec_q20udecpu
melsec_iq-r_r16_sfcpu
melsec_q26dhccpu-ls_firmware
melsec_q173dscpu
melsec_iq-r_r16_cpu
melsec_iq-r_r04_pcpu
melsec_q06udecpu
melsec_iq-r_r08_sfcpu_firmware
melsec_q13udpvcpu_firmware
melsec_iq-r_r16_mtcpu_firmware
melsec_q26udvcpu_firmware
melsec_l06cpu\(-p\)_firmware
melsec_q50udecpu_firmware
melsec_iq-r_r08_sfcpu
melsec_iq-r_r120_sfcpu_firmware
melsec_q24dhccpu-v\(g\)
melsec_q26udecpu
melsec_mr-mq100
melsec_iq-r_r08_cpu_firmware
melsec_q172dscpu_firmware
melsec_q06udvcpu_firmware
melsec_q04udpvcpu
melsec_iq-r_r02_cpu_firmware
melsec_q13udecpu
melipc_mi5122-vw
melsec_q26udecpu_firmware
melsec_mr-mq100_firmware
melsec_l26cpu\(-p\)_firmware
melsec_iq-r_r04_cpu
melsec_q03udecpu_firmware
melsec_q50udecpu
melsec_q24dhccpu-v\(g\)_firmware
melsec_l26cpu-\(p\)bt
melsec_q26udvcpu
melsec_iq-r_r32_cpu
melsec_q06udpvcpu_firmware
melsec_iq-r_r64_mtcpu_firmware
melsec_q26udpvcpu
melsec_l02cpu\(-p\)_firmware
melsec_iq-r_r04_pcpu_firmware
melsec_iq-r_r32_mtcpu_firmware
melsec_q100udecpu
melsec_q100udecpu_firmware
melsec_q172dcpu-s1_firmware
melsec_q24dhccpu-ls
melsec_l02cpu\(-p\)
melsec_iq-r_r12_ccpu-v_firmware
melsec_q170mscpu\(-s1\)_firmware
melsec_iq-r_r64_mtcpu
melsec_q170mcpu
melsec_q170mscpu\(-s1\)
melsec_q173dcpu-s1
melsec_iq-r_r32_pcpu_firmware
melsec_iq-r_r12_ccpu-v
melsec_iq-r_r08_cpu
melsec_q172dscpu
melsec_iq-r_r32_mtcpu
melsec_q20udecpu_firmware
melsec_iq-r_r08_pcpu_firmware
melsec_q13udpvcpu
melsec_q10udecpu_firmware
melsec_q26udpvcpu_firmware
melsec_iq-r_r01_cpu_firmware
melsec_iq-r_r16_pcpu
melsec_l26cpu\(-p\)
melsec_iq-r_r120_sfcpu
melsec_iq-r_r120_pcpu
melsec_iq-r_r32_cpu_firmware
melsec_q173dscpu_firmware
melsec_q06udecpu_firmware
melsec_iq-r_r120_cpu_firmware
melsec_iq-r_r120_pcpu_firmware
melsec_l06cpu\(-p\)
melsec_q24dhccpu-ls_firmware
melsec_iq-r_r00_cpu_firmware
melsec_q13udvcpu_firmware

CWE

CWE-400

Uncontrolled Resource Consumption

7.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

JSON object

Attach tags to CVE-2021-20609

7.5^/10

7.8^/10

Attach tags to `CVE-2021-20609`