{ "containers": { "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R00CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"24\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R01CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"24\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R02CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"24\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R04CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R08CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R16CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R32CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R120CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R04ENCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R08ENCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R16ENCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R32ENCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R120ENCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"57\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R08SFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"26\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R16SFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"26\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R32SFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"26\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R120SFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"26\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R08PCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"29\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R16PCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"29\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R32PCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"29\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R120PCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"29\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R08PSFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"08\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R16PSFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"08\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R32PSFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"08\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R120PSFCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"08\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R16MTCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"23\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R32MTCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"23\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R64MTCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"23\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC iQ-R Series R12CCPU-V", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"16\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q03UDECPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q04UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q06UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q10UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q13UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q20UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q26UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q50UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q100UDEHCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q03UDVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q04UDVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q06UDVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q13UDVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q26UDVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q04UDPVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q06UDPVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q13UDPVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q26UDPVCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23071\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q12DCCPU-V", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"24031\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q24DHCCPU-V ", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"24031\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q24DHCCPU-VG", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"24031\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q24DHCCPU-LS", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"24031\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q26DHCCPU-LS", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"24031\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series MR-MQ100", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"F\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q172DCPU-S1", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"W\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q173DCPU-S1", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"W\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q172DSCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"Y\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q173DSCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"Y\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q170MCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"W\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q170MSCPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"Y\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC Q Series Q170MSCPU-S1", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Operating system software version \"Y\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L02CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L06CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L26CPU", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L02CPU-P", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L06CPU-P", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L26CPU-P", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L26CPU-BT", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELSEC L Series L26CPU-PBT", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "The first 5 digits of serial No. \"23121\" and prior" } ] }, { "defaultStatus": "unaffected", "product": "MELIPC Series MI5122-VW", "vendor": "Mitsubishi Electric Corporation", "versions": [ { "status": "affected", "version": "Firmware versions \"05\" and prior" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery." } ], "value": "Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery." } ], "impacts": [ { "descriptions": [ { "lang": "en", "value": "Denial of Service" } ] } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "orgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad", "shortName": "Mitsubishi", "dateUpdated": "2023-11-09T08:23:22.311Z" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf" }, { "tags": [ "government-resource" ], "url": "https://jvn.jp/vu/JVNVU94434051/index.html" }, { "tags": [ "government-resource" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:45:44.828Z" }, "title": "CVE Program Container", "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf" }, { "tags": [ "government-resource", "x_transferred" ], "url": "https://jvn.jp/vu/JVNVU94434051/index.html" }, { "tags": [ "government-resource", "x_transferred" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02" } ] } ] }, "cveMetadata": { "assignerOrgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad", "assignerShortName": "Mitsubishi", "cveId": "CVE-2021-20611", "datePublished": "2021-12-01T15:41:31", "dateReserved": "2020-12-17T00:00:00", "dateUpdated": "2024-08-03T17:45:44.828Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }