CVE-2021-205999.1CriticalCWE-319

CVE-2021-20599: Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08SFCPU vulnerability

Mitsubishi Electric Corporation · MELSEC iQ-R Series Safety CPU R08SFCPU

Vendor fix available · Affected: Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08SFCPU · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.4%probability of exploitation in the next 30 days

72nd percentile

050100

Higher than 72% of scored CVEs

9.1CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Mitsubishi Electric Corporation · MELSEC iQ-R Series Safety CPU R08SFCPUFirmware versions "26" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R series Safety CPU R16SFCPUFirmware versions "26" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R series Safety CPU R32SFCPUFirmware versions "26" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R series Safety CPU R120SFCPUFirmware versions "26" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R Series SIL2 Process CPU R08PSFCPUFirmware versions "11" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R series SIL2 Process CPU R16PSFCPUFirmware versions "11" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R series SIL2 Process CPU R32PSFCPUFirmware versions "11" and prior
Mitsubishi Electric Corporation · MELSEC iQ-R series SIL2 Process CPU R120PSFCPUFirmware versions "11" and prior

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Cleartext Transmission of Sensitive Information · Cryptography
Vendor: Mitsubishi Electric Corporation
Published: October 2021
Band: Possible (1 to 10%), October 2021

CoverageNo articles yet

No CyberSIXT article names CVE-2021-20599 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.