CVE-2021-20588

highPriorität · verfolgen · 41EPSS 0.069 · 94. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
6.88% (94th) EPSS
CVSS 7.5 · high
Is it mine?
164 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-26

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenCPU Module Logging Configuration Toolcisa_csaf_ot

    CPU Module Logging Configuration Tool: Version 1.118X or later

  • BehobenCW Configuratorcisa_csaf_ot

    CW Configurator: Version 1.012N or later

  • BehobenData Transfercisa_csaf_ot

    Data Transfer: Version 3.45X or later

  • BehobenEZSocketcisa_csaf_ot

    EZSocket: Version 5.5 or later

  • BehobenFR Configuratorcisa_csaf_ot

    FR Configurator

  • BehobenFR Configurator SW3cisa_csaf_ot

    FR Configurator SW3

  • BehobenFR Configurator2cisa_csaf_ot

    FR Configurator2: Version 1.25B or later

  • BehobenGT SoftGOT1000 Version3cisa_csaf_ot

    GT SoftGOT1000 Version3: Version 3.255R or later

  • BehobenGT SoftGOT2000 Version1cisa_csaf_ot

    GT SoftGOT2000 Version1: Version 1.255R or later

  • BehobenGX Configurator-DPcisa_csaf_ot

    GX Configurator-DP: Version 7.15R or later

  • BehobenGX Configurator-QPcisa_csaf_ot

    GX Configurator-QP

  • BehobenGX Developercisa_csaf_ot

    GX Developer: Version 8.507D or later

  • BehobenGX Explorercisa_csaf_ot

    GX Explorer

  • BehobenGX IEC Developercisa_csaf_ot

    GX IEC Developer

  • BehobenGX LogViewercisa_csaf_ot

    GX LogViewer: Version 1.118X or later

  • BehobenGX RemoteService-Icisa_csaf_ot

    GX RemoteService-I

  • BehobenGX Works2cisa_csaf_ot

    GX Works2: Version 1.600A or later

  • BehobenGX Works3cisa_csaf_ot

    GX Works3: Version 1.072A or later

  • BehobenMELFA-Workscisa_csaf_ot

    MELFA-Works: Version 4.5 or later

  • BehobenMELSEC WinCPU Setting Utilitycisa_csaf_ot

    MELSEC WinCPU Setting Utility

  • BehobenMELSOFT Navigatorcisa_csaf_ot

    MELSOFT Navigator: Version 2.78G or later

  • BehobenMH11 SettingTool Version2cisa_csaf_ot

    MH11 SettingTool Version2: Version 2.005F or later

  • BehobenMI Configuratorcisa_csaf_ot

    MI Configurator: Version 1.005F or later

  • BehobenMT Works2cisa_csaf_ot

    MT Works2: Version 1.170C or later

  • BehobenMX Componentcisa_csaf_ot

    MX Component: Version 5.002C or later

  • BehobenM_CommDTM-HARTcisa_csaf_ot

    M_CommDTM-HART

  • BehobenM_CommDTM-IO-Linkcisa_csaf_ot

    M_CommDTM-IO-Link: Version 1.04E or later

  • BehobenNetwork Interface Board CC IE Control utilitycisa_csaf_ot

    Network Interface Board CC IE Control utility: Version 1.30G or later

  • BehobenNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

    Network Interface Board CC IE Field Utility: Version 1.17T or later

  • BehobenNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

    Network Interface Board CC-Link Ver.2 Utility: Version 1.24A or later

  • BehobenNetwork Interface Board MNETH utilitycisa_csaf_ot

    Network Interface Board MNETH utility: Version 35M or later

  • BehobenPX Developercisa_csaf_ot

    PX Developer: Version 1.54G or later

  • BehobenRT ToolBox2cisa_csaf_ot

    RT ToolBox2: Version 3.74C or later

  • BehobenRT ToolBox3cisa_csaf_ot

    RT ToolBox3: Version 1.90U or later

  • BehobenSLMP Data Collectorcisa_csaf_ot

    SLMP Data Collector: Version 1.05F or later

  • MitigationCPU Module Logging Configuration Toolcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationCW Configuratorcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationData Transfercisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationEZSocketcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationFR Configuratorcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationFR Configurator SW3cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationFR Configurator2cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGT Designer3 Version1(GOT1000)cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGT Designer3 Version1(GOT2000)cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGT SoftGOT1000 Version3cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGT SoftGOT2000 Version1cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX Configurator-DPcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX Configurator-QPcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX Developercisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX Explorercisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX IEC Developercisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX LogViewercisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX RemoteService-Icisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX Works2cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationGX Works3cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMELFA-Workscisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMELSEC WinCPU Setting Utilitycisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMELSOFT Navigatorcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMH11 SettingTool Version2cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMI Configuratorcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMT Works2cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationMX Componentcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationM_CommDTM-HARTcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationM_CommDTM-IO-Linkcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationNetwork Interface Board CC IE Control utilitycisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationNetwork Interface Board MNETH utilitycisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationPX Developercisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationRT ToolBox2cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationRT ToolBox3cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationSLMP Data Collectorcisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationiQ Monozukuri ANDON (Data Transfer)cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

  • MitigationiQ Monozukuri Process Remote Monitoring (Data Transfer)cisa_csaf_ot

    For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jpAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

betroffene Produkte (164)

Betroffene Produkte und Versionsbereiche.

20 von 164 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-21-049-02Mitsubishi Electric FA Engineering Software Products (Update H)2021-02-18icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities may cause a denial-of-service condition.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2021-02-19geändert 2026-06-17
08

Referenzen (16)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan