CVE-2021-20588
highPriorität · verfolgen · 41EPSS 0.069 · 94. PerzentilEUUSEPSS · bewertet 2026-10-26
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenCPU Module Logging Configuration Toolcisa_csaf_ot
CPU Module Logging Configuration Tool: Version 1.118X or later
- BehobenCW Configuratorcisa_csaf_ot
CW Configurator: Version 1.012N or later
- BehobenData Transfercisa_csaf_ot
Data Transfer: Version 3.45X or later
- BehobenEZSocketcisa_csaf_ot
EZSocket: Version 5.5 or later
- BehobenFR Configuratorcisa_csaf_ot
FR Configurator
- BehobenFR Configurator SW3cisa_csaf_ot
FR Configurator SW3
- BehobenFR Configurator2cisa_csaf_ot
FR Configurator2: Version 1.25B or later
- BehobenGT SoftGOT1000 Version3cisa_csaf_ot
GT SoftGOT1000 Version3: Version 3.255R or later
- BehobenGT SoftGOT2000 Version1cisa_csaf_ot
GT SoftGOT2000 Version1: Version 1.255R or later
- BehobenGX Configurator-DPcisa_csaf_ot
GX Configurator-DP: Version 7.15R or later
- BehobenGX Configurator-QPcisa_csaf_ot
GX Configurator-QP
- BehobenGX Developercisa_csaf_ot
GX Developer: Version 8.507D or later
- BehobenGX Explorercisa_csaf_ot
GX Explorer
- BehobenGX IEC Developercisa_csaf_ot
GX IEC Developer
- BehobenGX LogViewercisa_csaf_ot
GX LogViewer: Version 1.118X or later
- BehobenGX RemoteService-Icisa_csaf_ot
GX RemoteService-I
- BehobenGX Works2cisa_csaf_ot
GX Works2: Version 1.600A or later
- BehobenGX Works3cisa_csaf_ot
GX Works3: Version 1.072A or later
- BehobenMELFA-Workscisa_csaf_ot
MELFA-Works: Version 4.5 or later
- BehobenMELSEC WinCPU Setting Utilitycisa_csaf_ot
MELSEC WinCPU Setting Utility
- BehobenMELSOFT Navigatorcisa_csaf_ot
MELSOFT Navigator: Version 2.78G or later
- BehobenMH11 SettingTool Version2cisa_csaf_ot
MH11 SettingTool Version2: Version 2.005F or later
- BehobenMI Configuratorcisa_csaf_ot
MI Configurator: Version 1.005F or later
- BehobenMT Works2cisa_csaf_ot
MT Works2: Version 1.170C or later
- BehobenMX Componentcisa_csaf_ot
MX Component: Version 5.002C or later
- BehobenM_CommDTM-HARTcisa_csaf_ot
M_CommDTM-HART
- BehobenM_CommDTM-IO-Linkcisa_csaf_ot
M_CommDTM-IO-Link: Version 1.04E or later
- BehobenNetwork Interface Board CC IE Control utilitycisa_csaf_ot
Network Interface Board CC IE Control utility: Version 1.30G or later
- BehobenNetwork Interface Board CC IE Field Utilitycisa_csaf_ot
Network Interface Board CC IE Field Utility: Version 1.17T or later
- BehobenNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot
Network Interface Board CC-Link Ver.2 Utility: Version 1.24A or later
- BehobenNetwork Interface Board MNETH utilitycisa_csaf_ot
Network Interface Board MNETH utility: Version 35M or later
- BehobenPX Developercisa_csaf_ot
PX Developer: Version 1.54G or later
- BehobenRT ToolBox2cisa_csaf_ot
RT ToolBox2: Version 3.74C or later
- BehobenRT ToolBox3cisa_csaf_ot
RT ToolBox3: Version 1.90U or later
- BehobenSLMP Data Collectorcisa_csaf_ot
SLMP Data Collector: Version 1.05F or later
- MitigationCPU Module Logging Configuration Toolcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationCW Configuratorcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationData Transfercisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationEZSocketcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationFR Configuratorcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationFR Configurator SW3cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationFR Configurator2cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGT Designer3 Version1(GOT1000)cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGT Designer3 Version1(GOT2000)cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGT SoftGOT1000 Version3cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGT SoftGOT2000 Version1cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX Configurator-DPcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX Configurator-QPcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX Developercisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX Explorercisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX IEC Developercisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX LogViewercisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX RemoteService-Icisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX Works2cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationGX Works3cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMELFA-Workscisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMELSEC WinCPU Setting Utilitycisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMELSOFT Navigatorcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMH11 SettingTool Version2cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMI Configuratorcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMT Works2cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationMX Componentcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationM_CommDTM-HARTcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationM_CommDTM-IO-Linkcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationNetwork Interface Board CC IE Control utilitycisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationNetwork Interface Board CC IE Field Utilitycisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationNetwork Interface Board MNETH utilitycisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationPX Developercisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationRT ToolBox2cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationRT ToolBox3cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationSLMP Data Collectorcisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationiQ Monozukuri ANDON (Data Transfer)cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
- MitigationiQ Monozukuri Process Remote Monitoring (Data Transfer)cisa_csaf_ot
For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (164)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-21-049-02Mitsubishi Electric FA Engineering Software Products (Update H)2021-02-18icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may cause a denial-of-service condition.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (16)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2021-20588cnnvd
- https://jvn.jp/vu/JVNVU92330101/index.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-20588cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.0623.2cnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02cnnvd
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdfcnnvd
- https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdfcnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan