Not rated

CVE-2021-20598 Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules…

Description

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.

Affected products and versions

Product	Affected versions	Fixed in
MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU	Versions not published

Do you use MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU?

Track this CVE Watch MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20598

Timeline

Published August 6, 2021
Last modified August 3, 2024

References

jvn.jp jvn.jp
www.mitsubishielectric.com www.mitsubishielectric.com

Track this CVE