Skip to content
Sign in
7.5 High

CVE-2021-20610 Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series…

Description

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

Affected products and versions

Product Affected versions Fixed in
MELSEC iQ-R Series R00CPU Versions not published
MELSEC iQ-R Series R01CPU Versions not published
MELSEC iQ-R Series R02CPU Versions not published
MELSEC iQ-R Series R04CPU Versions not published
MELSEC iQ-R Series R08CPU Versions not published
MELSEC iQ-R Series R16CPU Versions not published
MELSEC iQ-R Series R32CPU Versions not published
MELSEC iQ-R Series R120CPU Versions not published
MELSEC iQ-R Series R04ENCPU Versions not published
Show the 60 other branches
Product Affected versions Fixed in
MELSEC iQ-R Series R08ENCPU Versions not published
MELSEC iQ-R Series R16ENCPU Versions not published
MELSEC iQ-R Series R32ENCPU Versions not published
MELSEC iQ-R Series R120ENCPU Versions not published
MELSEC iQ-R Series R08SFCPU Versions not published
MELSEC iQ-R Series R16SFCPU Versions not published
MELSEC iQ-R Series R32SFCPU Versions not published
MELSEC iQ-R Series R120SFCPU Versions not published
MELSEC iQ-R Series R08PCPU Versions not published
MELSEC iQ-R Series R16PCPU Versions not published
MELSEC iQ-R Series R32PCPU Versions not published
MELSEC iQ-R Series R120PCPU Versions not published
MELSEC iQ-R Series R08PSFCPU Versions not published
MELSEC iQ-R Series R16PSFCPU Versions not published
MELSEC iQ-R Series R32PSFCPU Versions not published
MELSEC iQ-R Series R120PSFCPU Versions not published
MELSEC iQ-R Series R16MTCPU Versions not published
MELSEC iQ-R Series R32MTCPU Versions not published
MELSEC iQ-R Series R64MTCPU Versions not published
MELSEC iQ-R Series R12CCPU-V Versions not published
MELSEC Q Series Q03UDECPU Versions not published
MELSEC Q Series Q04UDEHCPU Versions not published
MELSEC Q Series Q06UDEHCPU Versions not published
MELSEC Q Series Q10UDEHCPU Versions not published
MELSEC Q Series Q13UDEHCPU Versions not published
MELSEC Q Series Q20UDEHCPU Versions not published
MELSEC Q Series Q26UDEHCPU Versions not published
MELSEC Q Series Q50UDEHCPU Versions not published
MELSEC Q Series Q100UDEHCPU Versions not published
MELSEC Q Series Q03UDVCPU Versions not published
MELSEC Q Series Q04UDVCPU Versions not published
MELSEC Q Series Q06UDVCPU Versions not published
MELSEC Q Series Q13UDVCPU Versions not published
MELSEC Q Series Q26UDVCPU Versions not published
MELSEC Q Series Q04UDPVCPU Versions not published
MELSEC Q Series Q06UDPVCPU Versions not published
MELSEC Q Series Q13UDPVCPU Versions not published
MELSEC Q Series Q26UDPVCPU Versions not published
MELSEC Q Series Q12DCCPU-V Versions not published
MELSEC Q Series Q24DHCCPU-V Versions not published
MELSEC Q Series Q24DHCCPU-VG Versions not published
MELSEC Q Series Q24DHCCPU-LS Versions not published
MELSEC Q Series Q26DHCCPU-LS Versions not published
MELSEC Q Series MR-MQ100 Versions not published
MELSEC Q Series Q172DCPU-S1 Versions not published
MELSEC Q Series Q173DCPU-S1 Versions not published
MELSEC Q Series Q172DSCPU Versions not published
MELSEC Q Series Q173DSCPU Versions not published
MELSEC Q Series Q170MCPU Versions not published
MELSEC Q Series Q170MSCPU Versions not published
MELSEC Q Series Q170MSCPU-S1 Versions not published
MELSEC L Series L02CPU Versions not published
MELSEC L Series L06CPU Versions not published
MELSEC L Series L26CPU Versions not published
MELSEC L Series L02CPU-P Versions not published
MELSEC L Series L06CPU-P Versions not published
MELSEC L Series L26CPU-P Versions not published
MELSEC L Series L26CPU-BT Versions not published
MELSEC L Series L26CPU-PBT Versions not published
MELIPC Series MI5122-VW Versions not published

Other CVEs of MELSEC iQ-R Series R00CPU

The 8 CVEs of MELSEC iQ-R Series R00CPU →
CVE-2023-4625 Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC… 5.3 Medium CVE-2023-1424 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric… 10.0 Critical CVE-2023-0457 Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series,… 7.5 High CVE-2022-40267 Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F… 5.9 Medium
Track this CVE