CVE-2021-20591
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition.
Published:Jun 11, 2021
Last Modified:Nov 21, 2024
EPS:Jun 11, 2021
EPSS Score:0.00496
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Mitsubishielectric
Product
R00cpu
Mitsubishielectric
R00cpu
Vendor
Mitsubishielectric
Product
R00cpu Firmware
Mitsubishielectric
R00cpu Firmware
Vendor
Mitsubishielectric
Product
R01cpu
Mitsubishielectric
R01cpu
Vendor
Mitsubishielectric
Product
R01cpu Firmware
Mitsubishielectric
R01cpu Firmware
Vendor
Mitsubishielectric
Product
R02cpu
Mitsubishielectric
R02cpu
Vendor
Mitsubishielectric
Product
R02cpu Firmware
Mitsubishielectric
R02cpu Firmware
Vendor
Mitsubishielectric
Product
R04cpu
Mitsubishielectric
R04cpu
Vendor
Mitsubishielectric
Product
R04cpu Firmware
Mitsubishielectric
R04cpu Firmware
Vendor
Mitsubishielectric
Product
R08cpu
Mitsubishielectric
R08cpu
Vendor
Mitsubishielectric
Product
R08cpu Firmware
Mitsubishielectric
R08cpu Firmware
Vendor
Mitsubishielectric
Product
R08pcpu
Mitsubishielectric
R08pcpu
Vendor
Mitsubishielectric
Product
R08pcpu Firmware
Mitsubishielectric
R08pcpu Firmware
Vendor
Mitsubishielectric
Product
R08psfcpu
Mitsubishielectric
R08psfcpu
Vendor
Mitsubishielectric
Product
R08psfcpu Firmware
Mitsubishielectric
R08psfcpu Firmware
Vendor
Mitsubishielectric
Product
R08sfcpu
Mitsubishielectric
R08sfcpu
Vendor
Mitsubishielectric
Product
R08sfcpu Firmware
Mitsubishielectric
R08sfcpu Firmware
Vendor
Mitsubishielectric
Product
R120cpu
Mitsubishielectric
R120cpu
Vendor
Mitsubishielectric
Product
R120cpu Firmware
Mitsubishielectric
R120cpu Firmware
Vendor
Mitsubishielectric
Product
R120pcpu
Mitsubishielectric
R120pcpu
Vendor
Mitsubishielectric
Product
R120pcpu Firmware
Mitsubishielectric
R120pcpu Firmware
Vendor
Mitsubishielectric
Product
R120psfcpu
Mitsubishielectric
R120psfcpu
Vendor
Mitsubishielectric
Product
R120psfcpu Firmware
Mitsubishielectric
R120psfcpu Firmware
Vendor
Mitsubishielectric
Product
R120sfcpu
Mitsubishielectric
R120sfcpu
Vendor
Mitsubishielectric
Product
R120sfcpu Firmware
Mitsubishielectric
R120sfcpu Firmware
Vendor
Mitsubishielectric
Product
R16cpu
Mitsubishielectric
R16cpu
Vendor
Mitsubishielectric
Product
R16cpu Firmware
Mitsubishielectric
R16cpu Firmware
Vendor
Mitsubishielectric
Product
R16pcpu
Mitsubishielectric
R16pcpu
Vendor
Mitsubishielectric
Product
R16pcpu Firmware
Mitsubishielectric
R16pcpu Firmware
Vendor
Mitsubishielectric
Product
R16psfcpu
Mitsubishielectric
R16psfcpu
Vendor
Mitsubishielectric
Product
R16psfcpu Firmware
Mitsubishielectric
R16psfcpu Firmware
Vendor
Mitsubishielectric
Product
R16sfcpu
Mitsubishielectric
R16sfcpu
Vendor
Mitsubishielectric
Product
R16sfcpu Firmware
Mitsubishielectric
R16sfcpu Firmware
Vendor
Mitsubishielectric
Product
R32cpu
Mitsubishielectric
R32cpu
Vendor
Mitsubishielectric
Product
R32cpu Firmware
Mitsubishielectric
R32cpu Firmware
Vendor
Mitsubishielectric
Product
R32pcpu
Mitsubishielectric
R32pcpu
Vendor
Mitsubishielectric
Product
R32pcpu Firmware
Mitsubishielectric
R32pcpu Firmware
Vendor
Mitsubishielectric
Product
R32psfcpu
Mitsubishielectric
R32psfcpu
Vendor
Mitsubishielectric
Product
R32psfcpu Firmware
Mitsubishielectric
R32psfcpu Firmware
Vendor
Mitsubishielectric
Product
R32sfcpu
Mitsubishielectric
R32sfcpu
Vendor
Mitsubishielectric
Product
R32sfcpu Firmware
Mitsubishielectric
R32sfcpu Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
