ICSA-21-147-05

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC iQ-R Series

view advisory published 2021-05-27

Successful exploitation of this vulnerability may prevent legitimate clients from connecting to an affected product.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-20591UShigh7.5—
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/12…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

  • MitigationR00/01/02CPU

    If Port 5007 of the MELSOFT transmission port (TCP/IP) is not used, set b2 to "1" in advance. See MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory for more information.

  • MitigationR04/08/16/32/120(EN)CPU

    If Port 5007 of the MELSOFT transmission port (TCP/IP) is not used, set b2 to "1" in advance. See MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory for more information.

  • MitigationR08/16/32/120PCPU

    If Port 5007 of the MELSOFT transmission port (TCP/IP) is not used, set b2 to "1" in advance. See MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory for more information.

  • MitigationR08/16/32/120PSFCPU

    If Port 5007 of the MELSOFT transmission port (TCP/IP) is not used, set b2 to "1" in advance. See MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory for more information.

  • MitigationR08/16/32/120SFCPU

    If Port 5007 of the MELSOFT transmission port (TCP/IP) is not used, set b2 to "1" in advance. See MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory for more information.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan