Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20592 State: PUBLISHED Published: 2021-08-05T20:46:50 Last Updated: 2024-08-03T17:45:44.454Z Vendors: n/a Products: GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000 Problem Types: Missing synchronization Description: Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions 1.170C through 1.256S allows a remote unauthenticated attacker to cause DoS condition on the MODBUS/TCP slave communication function of the products by r
mote unauthenticated attacker to cause DoS condition on the MODBUS/TCP slave communication function of the products by rapidly and repeatedly connecting and disconnecting to and from the MODBUS/TCP communication port on a target. Restart or reset is required to recover. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-007_en.pdf - https://jvn.jp/vu/JVNVU92414172/index.html
CVE ID: CVE-2021-20593 State: PUBLISHED Published: 2021-07-13T13:30:59 Last Updated: 2024-08-03T17:45:44.715Z Vendors: n/a Products: Air Conditioning System/Centralized Controllers G-50A; GB-50A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA Problem Types: Incorrect Implementation of Authentication Algorithm Description: Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prio
g System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior) and Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) allows a remote authenticated attacker to impersonate administrato
xpansion Controllers (PAC-YG50ECA Ver.2.20 and prior) allows a remote authenticated attacker to impersonate administrators to disclose configuration information of the air conditioning system and tamper information (e.g. operation information and configuration of air conditioning system) by exploiting this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-004_en.pdf - https://jvn.jp/vu/JVNVU96046575/index.html
CVE ID: CVE-2021-20594 State: PUBLISHED Published: 2021-08-06T00:00:00 Last Updated: 2024-08-03T17:45:44.726Z Vendors: n/a Products: Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a re
hi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to acquire legitimate user names registered in the module via brute-force attack on user names. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU98578731/index.html - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-008_en.pdf - https://www.cisa.gov/uscert/ics/advisories/icsa-21-250-01
CVE ID: CVE-2021-20595 State: PUBLISHED Published: 2021-07-13T10:54:01 Last Updated: 2024-08-03T17:45:44.715Z Vendors: n/a Products: Air Conditioning System/Centralized Controllers G-50A; GB-50A; GB-24A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA; Air Conditioning System/BM adapter BAC-HD150 Problem Types: Improper Restriction of XML External Entity Reference Description: Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 a
Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior), Air Conditioning System/Expansion Controllers (PAC-YG50EC
ior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior), Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) and Air Conditioning System/BM adapter(BAC-HD150 Ver.2.21 and prior) allows a remote unauthenticated attacker to disclose some of data in the air conditioning system or cause a DoS condition by sending specially crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-005_en.pdf - https://jvn.jp/vu/JVNVU93086468/index.html
CVE ID: CVE-2021-20596 State: PUBLISHED Published: 2021-07-22T11:02:56 Last Updated: 2024-08-03T17:45:44.834Z Vendors: n/a Products: MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502 Problem Types: NULL Pointer Dereference Description: NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - h
t affected and system reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-006_en.pdf - https://jvn.jp/vu/JVNVU94348759/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-201-01
CVE ID: CVE-2021-20597 State: PUBLISHED Published: 2021-08-06T00:00:00 Last Updated: 2024-08-03T17:45:44.727Z Vendors: n/a Products: Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU Problem Types: Insufficiently Protected Credentials Description: Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to th
CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to the target unauthorizedly by sniffing network traffic and obtaining credentials when registering user information in the target or changing a password. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-009_en.pdf - https://jvn.jp/vu/JVNVU98578731/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-21-250-01
CVE ID: CVE-2021-20598 State: PUBLISHED Published: 2021-08-06T16:53:47 Last Updated: 2024-08-03T17:45:44.713Z Vendors: n/a Products: MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU Problem Types: Overly Restrictive Account Lockout Mechanism Description: Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU98578731/index.html - https://
. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU98578731/index.html - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-010_en.pdf
CVE ID: CVE-2021-20599 State: PUBLISHED Published: 2021-10-14T00:00:00 Last Updated: 2024-08-03T17:45:44.681Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series Safety CPU R08SFCPU, MELSEC iQ-R series Safety CPU R16SFCPU, MELSEC iQ-R series Safety CPU R32SFCPU, MELSEC iQ-R series Safety CPU R120SFCPU, MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU, MELSEC iQ-R series SIL2 Process CPU R16PSFCPU, MELSEC iQ-R series SIL2 Process CPU R32PSFCPU, MELSEC iQ-R series SIL2 Process CPU R120PSFCPU Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive InformationCleartext transmission of sensit
FCPU Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-011_en.pdf - https://jvn.jp/vu/JVNVU98578731 - https://www.cisa.gov/uscert/ics/advisories/icsa-2
/vulnerability/pdf/2021-011_en.pdf - https://jvn.jp/vu/JVNVU98578731 - https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-03
CVE ID: CVE-2021-20600 State: PUBLISHED Published: 2021-10-08T16:42:10 Last Updated: 2024-08-03T17:45:44.694Z Vendors: n/a Products: Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Problem Types: Uncontrolled Resource Consumption Description: Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending a large number of packets in a short time while the module starting up. System reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishiel
eset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-015_en.pdf - https://jvn.jp/vu/JVNVU94914666/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-04
CVE ID: CVE-2021-20601 State: PUBLISHED Published: 2021-11-23T14:42:53 Last Updated: 2024-08-03T17:45:44.858Z Vendors: n/a Products: GOT2000 series GT27 model; GOT2000 series GT25 model; GOT2000 series GT23 model; GOT2000 series GT21 model; GOT SIMPLE series GS21 model; GT SoftGOT2000 Problem Types: Improper Input Validation Description: Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the config
ions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf - https://jvn.jp/vu/JVNVU98072504 - https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02
CVE ID: CVE-2021-20602 State: REJECTED Published: 2021-10-07T13:28:53 Last Updated: 2022-04-11T19:38:26 Description: No description available.
CVE ID: CVE-2021-20603 State: REJECTED Published: 2021-10-07T13:23:08 Last Updated: 2022-04-11T19:38:27 Description: No description available.
CVE ID: CVE-2021-20604 State: REJECTED Published: 2021-10-07T13:25:11 Last Updated: 2022-04-11T19:38:27 Description: No description available.
CVE ID: CVE-2021-20605 State: REJECTED Published: 2021-10-07T13:27:15 Last Updated: 2022-04-11T19:38:28 Description: No description available.
CVE ID: CVE-2021-20606 State: PUBLISHED Published: 2021-12-17T16:10:27 Last Updated: 2024-08-03T17:45:44.613Z Vendors: n/a Products: Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT Navigator; Mitsubishi Electric EZSocket Problem Types: Out-of-bounds Read Description: Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open malicious project file specially crafted by an attacker. Additional Analyst Notes: - CVE Program Container: References: - h
icious project file specially crafted by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-021_en.pdf - https://jvn.jp/vu/JVNVU93817405/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05
CVE ID: CVE-2021-20607 State: PUBLISHED Published: 2021-12-17T16:10:28 Last Updated: 2024-08-03T17:45:44.783Z Vendors: n/a Products: Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT Navigator; Mitsubishi Electric EZSocket Problem Types: Integer Underflow Description: Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open malicious project file specially crafted by an attacker. Additional Analyst Notes: - CVE Program Container: References: - htt
ious project file specially crafted by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-021_en.pdf - https://jvn.jp/vu/JVNVU93817405/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05
CVE ID: CVE-2021-20608 State: PUBLISHED Published: 2021-12-17T16:10:27 Last Updated: 2024-08-03T17:45:44.831Z Vendors: n/a Products: GX Works2 Problem Types: Improper Handling of Length Parameter Inconsistency Description: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi Electric PLC by sending malicious crafted packets to tamper with the program file. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerabil
Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-020_en.pdf - https://jvn.jp/vu/JVNVU93019896/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-350-04
CVE ID: CVE-2021-20609 State: PUBLISHED Published: 2021-12-01T15:41:20 Last Updated: 2024-08-03T17:45:44.852Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series R00CPU, MELSEC iQ-R Series R01CPU, MELSEC iQ-R Series R02CPU, MELSEC iQ-R Series R04CPU, MELSEC iQ-R Series R08CPU, MELSEC iQ-R Series R16CPU, MELSEC iQ-R Series R32CPU, MELSEC iQ-R Series R120CPU, MELSEC iQ-R Series R04ENCPU, MELSEC iQ-R Series R08ENCPU, MELSEC iQ-R Series R16ENCPU, MELSEC iQ-R Series R32ENCPU, MELSEC iQ-R Series R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R Series
ies R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R Series R120SFCPU, MELSEC iQ-R Series R08PCPU, MELSEC iQ-R Series R16PCPU, MELSEC iQ-R Series R32PCPU, MELSEC iQ-R Series R120PCPU, MELSEC iQ-R Series R08PSFCPU, MELSEC iQ-R Series R16PSFCPU, MELSEC iQ-R Series R32PSFCPU, MELSEC iQ-R Series R120PSFCPU, MELSEC iQ-R Series R16MTCPU, MELSEC iQ-R Series R32MTCPU, MELSEC iQ-R Series R64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04UDEHCPU, MELSEC Q Series Q06UDEHCPU, MELSEC Q Series Q10UDEHCPU, MELSEC Q Series Q13UDEHCPU, MELSEC Q Series Q20UDEHCPU, MELSEC Q Series Q26UDEHCPU, MELSEC Q Series Q50UDE
s Q10UDEHCPU, MELSEC Q Series Q13UDEHCPU, MELSEC Q Series Q20UDEHCPU, MELSEC Q Series Q26UDEHCPU, MELSEC Q Series Q50UDEHCPU, MELSEC Q Series Q100UDEHCPU, MELSEC Q Series Q03UDVCPU, MELSEC Q Series Q04UDVCPU, MELSEC Q Series Q06UDVCPU, MELSEC Q Series Q13UDVCPU, MELSEC Q Series Q26UDVCPU, MELSEC Q Series Q04UDPVCPU, MELSEC Q Series Q06UDPVCPU, MELSEC Q Series Q13UDPVCPU, MELSEC Q Series Q26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V , MELSEC Q Series Q24DHCCPU-VG, MELSEC Q Series Q24DHCCPU-LS, MELSEC Q Series Q26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172DCPU-S1, MELSEC Q Series Q173DCPU-S1, MELSEC Q Series Q172DSCPU, MELSEC Q Series Q173DSCPU, MELSEC Q Ser
EC Q Series Q172DCPU-S1, MELSEC Q Series Q173DCPU-S1, MELSEC Q Series Q172DSCPU, MELSEC Q Series Q173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU, MELSEC Q Series Q170MSCPU-S1, MELSEC L Series L02CPU, MELSEC L Series L06CPU, MELSEC L Series L26CPU, MELSEC L Series L02CPU-P, MELSEC L Series L06CPU-P, MELSEC L Series L26CPU-P, MELSEC L Series L26CPU-BT, MELSEC L Series L26CPU-PBT, MELIPC Series MI5122-VW Problem Types: CWE-400 Description: Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series
04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a
ies Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf - https://jvn.jp/vu/JVNVU94434051/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02
CVE ID: CVE-2021-20610 State: PUBLISHED Published: 2021-12-01T15:41:25 Last Updated: 2024-08-03T17:45:44.828Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series R00CPU, MELSEC iQ-R Series R01CPU, MELSEC iQ-R Series R02CPU, MELSEC iQ-R Series R04CPU, MELSEC iQ-R Series R08CPU, MELSEC iQ-R Series R16CPU, MELSEC iQ-R Series R32CPU, MELSEC iQ-R Series R120CPU, MELSEC iQ-R Series R04ENCPU, MELSEC iQ-R Series R08ENCPU, MELSEC iQ-R Series R16ENCPU, MELSEC iQ-R Series R32ENCPU, MELSEC iQ-R Series R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R Series
EC Q Series Q172DCPU-S1, MELSEC Q Series Q173DCPU-S1, MELSEC Q Series Q172DSCPU, MELSEC Q Series Q173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU, MELSEC Q Series Q170MSCPU-S1, MELSEC L Series L02CPU, MELSEC L Series L06CPU, MELSEC L Series L26CPU, MELSEC L Series L02CPU-P, MELSEC L Series L06CPU-P, MELSEC L Series L26CPU-P, MELSEC L Series L26CPU-BT, MELSEC L Series L26CPU-PBT, MELIPC Series MI5122-VW Problem Types: CWE-130 Description: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, M
LSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series M
MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf - https://jvn.jp/vu/JVNVU94434051/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02
CVE ID: CVE-2021-20611 State: PUBLISHED Published: 2021-12-01T15:41:31 Last Updated: 2024-08-03T17:45:44.828Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series R00CPU, MELSEC iQ-R Series R01CPU, MELSEC iQ-R Series R02CPU, MELSEC iQ-R Series R04CPU, MELSEC iQ-R Series R08CPU, MELSEC iQ-R Series R16CPU, MELSEC iQ-R Series R32CPU, MELSEC iQ-R Series R120CPU, MELSEC iQ-R Series R04ENCPU, MELSEC iQ-R Series R08ENCPU, MELSEC iQ-R Series R16ENCPU, MELSEC iQ-R Series R32ENCPU, MELSEC iQ-R Series R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R Series