9.1
Critical
CVE-2021-20599 Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC…
Description
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| melsec_iq-r08sfcpu | Versions not published | |
| r16sfcpu | Versions not published | |
| r32sfcpu | Versions not published | |
| r120sfcpu | Versions not published | |
| r08psfcpu | Versions not published | |
| r16psfcpu | Versions not published | |
| r32psfcpu | Versions not published | |
| r120psfcpu | Versions not published | |
| MELSEC iQ-R Series Safety CPU R08SFCPU | Versions not published |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-R Series Safety CPU R16SFCPU | Versions not published | |
| MELSEC iQ-R Series Safety CPU R32SFCPU | Versions not published | |
| MELSEC iQ-R Series Safety CPU R120SFCPU | Versions not published | |
| MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU | Versions not published | |
| MELSEC iQ-R Series SIL2 Process CPU R16PSFCPU | Versions not published | |
| MELSEC iQ-R Series SIL2 Process CPU R32PSFCPU | Versions not published | |
| MELSEC iQ-R Series SIL2 Process CPU R120PSFCPU | Versions not published |