Skip to content
OpenAdvisories
High ICSA-21-250-01 3 CVEs

Mitsubishi Electric MELSEC iQ-R Series

Published Sep 7, 2021 · Updated Apr 18, 2024 · Revision 3

Vendor: Mitsubishi Electric Product: MELSEC iQ-R Series Safety CPU R08SFCPU Product: MELSEC iQ-R series Safety CPU R08SFCPU Firmware Product: MELSEC iQ-R series Safety CPU R120SFCPU Product: MELSEC iQ-R series Safety CPU R120SFCPU Firmware Product: MELSEC iQ-R series Safety CPU R16SFCPU Product: MELSEC iQ-R series Safety CPU R16SFCPU Firmware Product: MELSEC iQ-R series Safety CPU R32SFCPU Product: MELSEC iQ-R series Safety CPU R32SFCPU Firmware Product: MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU Product: MELSEC iQ-R series SIL2 Process CPU R08PSFCPU Firmware Product: MELSEC iQ-R series SIL2 Process CPU R120PSFCPU Product: MELSEC iQ-R series SIL2 Process CPU R120PSFCPU Firmware Product: MELSEC iQ-R series SIL2 Process CPU R16PSFCPU Product: MELSEC iQ-R series SIL2 Process CPU R16PSFCPU Firmware Product: MELSEC iQ-R series SIL2 Process CPU R32PSFCPU Product: MELSEC iQ-R series SIL2 Process CPU R32PSFCPU Firmware

Summary

Successful exploitation of these vulnerabilities could allow a remote attacker unauthorized access to legitimate usernames, CPU module access, or the ability to deny access to legitimate users.

Vulnerabilities 3

  • Unscored —
    CVE-2021-20594

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safe…

  • Unscored —
    CVE-2021-20597

    Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/…

  • Unscored —
    CVE-2021-20598

    Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/1…

Revision history

  1. #3

    Update B - Added new fixed version

  2. #2

    Update A - Added new fixed version

  3. #1

    Initial Publication

References