Not rated

CVE-2021-20596 NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14…

Description

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.

Affected products and versions

Product	Affected versions	Fixed in
MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502	Versions not published

Do you use MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502?

Track this CVE Watch MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502 Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20596

Timeline

Published July 22, 2021
Last modified August 3, 2024

References

www.mitsubishielectric.com www.mitsubishielectric.com
jvn.jp jvn.jp
us-cert.cisa.gov us-cert.cisa.gov

Track this CVE