Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability could allow a remote attacker to be able to log in to the CPU module by obtaining credentials.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-20599US | high7.5OT elevated | — | ||
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-21-287-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-21-287-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationMELSEC iQ-R series SIL2 Process CPU R08PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series SIL2 Process CPU R120PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series SIL2 Process CPU R16PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series SIL2 Process CPU R32PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R08SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R120SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R16SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R32SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan