CVE-2021-20588

A vendor fix is available.

• FixedCPU Module Logging Configuration Toolcisa_csaf_ot

  CPU Module Logging Configuration Tool: Version 1.118X or later

• FixedCW Configuratorcisa_csaf_ot

  CW Configurator: Version 1.012N or later

• FixedData Transfercisa_csaf_ot

  Data Transfer: Version 3.45X or later

• FixedEZSocketcisa_csaf_ot

  EZSocket: Version 5.5 or later

• FixedFR Configuratorcisa_csaf_ot

  FR Configurator

• FixedFR Configurator SW3cisa_csaf_ot

  FR Configurator SW3

• FixedFR Configurator2cisa_csaf_ot

  FR Configurator2: Version 1.25B or later

• FixedGT SoftGOT1000 Version3cisa_csaf_ot

  GT SoftGOT1000 Version3: Version 3.255R or later

• FixedGT SoftGOT2000 Version1cisa_csaf_ot

  GT SoftGOT2000 Version1: Version 1.255R or later

• FixedGX Configurator-DPcisa_csaf_ot

  GX Configurator-DP: Version 7.15R or later

• FixedGX Configurator-QPcisa_csaf_ot

  GX Configurator-QP

• FixedGX Developercisa_csaf_ot

  GX Developer: Version 8.507D or later

• FixedGX Explorercisa_csaf_ot

  GX Explorer

• FixedGX IEC Developercisa_csaf_ot

  GX IEC Developer

• FixedGX LogViewercisa_csaf_ot

  GX LogViewer: Version 1.118X or later

• FixedGX RemoteService-Icisa_csaf_ot

  GX RemoteService-I

• FixedGX Works2cisa_csaf_ot

  GX Works2: Version 1.600A or later

• FixedGX Works3cisa_csaf_ot

  GX Works3: Version 1.072A or later

• FixedMELFA-Workscisa_csaf_ot

  MELFA-Works: Version 4.5 or later

• FixedMELSEC WinCPU Setting Utilitycisa_csaf_ot

  MELSEC WinCPU Setting Utility

• FixedMELSOFT Navigatorcisa_csaf_ot

  MELSOFT Navigator: Version 2.78G or later

• FixedMH11 SettingTool Version2cisa_csaf_ot

  MH11 SettingTool Version2: Version 2.005F or later

• FixedMI Configuratorcisa_csaf_ot

  MI Configurator: Version 1.005F or later

• FixedMT Works2cisa_csaf_ot

  MT Works2: Version 1.170C or later

• FixedMX Componentcisa_csaf_ot

  MX Component: Version 5.002C or later

• FixedM_CommDTM-HARTcisa_csaf_ot

  M_CommDTM-HART

• FixedM_CommDTM-IO-Linkcisa_csaf_ot

  M_CommDTM-IO-Link: Version 1.04E or later

• FixedNetwork Interface Board CC IE Control utilitycisa_csaf_ot

  Network Interface Board CC IE Control utility: Version 1.30G or later

• FixedNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

  Network Interface Board CC IE Field Utility: Version 1.17T or later

• FixedNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

  Network Interface Board CC-Link Ver.2 Utility: Version 1.24A or later

• FixedNetwork Interface Board MNETH utilitycisa_csaf_ot

  Network Interface Board MNETH utility: Version 35M or later

• FixedPX Developercisa_csaf_ot

  PX Developer: Version 1.54G or later

• FixedRT ToolBox2cisa_csaf_ot

  RT ToolBox2: Version 3.74C or later

• FixedRT ToolBox3cisa_csaf_ot

  RT ToolBox3: Version 1.90U or later

• FixedSLMP Data Collectorcisa_csaf_ot

  SLMP Data Collector: Version 1.05F or later

• MitigationCPU Module Logging Configuration Toolcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationCW Configuratorcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationData Transfercisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationEZSocketcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationFR Configuratorcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationFR Configurator SW3cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationFR Configurator2cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGT Designer3 Version1(GOT1000)cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGT Designer3 Version1(GOT2000)cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGT SoftGOT1000 Version3cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGT SoftGOT2000 Version1cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX Configurator-DPcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX Configurator-QPcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX Developercisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX Explorercisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX IEC Developercisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX LogViewercisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX RemoteService-Icisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX Works2cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationGX Works3cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMELFA-Workscisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMELSEC WinCPU Setting Utilitycisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMELSOFT Navigatorcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMH11 SettingTool Version2cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMI Configuratorcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMT Works2cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationMX Componentcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationM_CommDTM-HARTcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationM_CommDTM-IO-Linkcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationNetwork Interface Board CC IE Control utilitycisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationNetwork Interface Board MNETH utilitycisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationPX Developercisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationRT ToolBox2cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationRT ToolBox3cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationSLMP Data Collectorcisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationiQ Monozukuri ANDON (Data Transfer)cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities:

• MitigationiQ Monozukuri Process Remote Monitoring (Data Transfer)cisa_csaf_ot

  For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric recommends taking the following mitigations to minimize the risk of exploiting these vulnerabilities: