ICSA-21-250-01

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC iQ-R Series

view advisory published 2021-09-07

Successful exploitation of these vulnerabilities could allow a remote attacker unauthorized access to legitimate usernames, CPU module access, or the ability to deny access to legitimate users.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2021-20598USmedium5.3—
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions)…
CVE-2021-20597UScritical9.1—
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi E…
CVE-2021-20594UShigh7.5—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and…
02

references

External citations — patches, advisories, analysis.

03

remediations (24)

  • MitigationMELSEC iQ-R Series SIL2 Process CPU R08PSFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series SIL2 Process CPU R120PSFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series SIL2 Process CPU R16PSFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series SIL2 Process CPU R32PSFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series Safety CPU R08SFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series Safety CPU R120SFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series Safety CPU R16SFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R Series Safety CPU R32SFCPU

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R08PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R08PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R120PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R120PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R16PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R16PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R32PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series SIL2 Process CPU R32PSFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R08SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R08SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R120SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R120SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R16SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R16SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R32SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

  • MitigationMELSEC iQ-R series Safety CPU R32SFCPU Firmware

    MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU:Firmware versions "12" or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan