CVE-2021-20596

Katalog CVE

CVSS 7.5 · High EPSS 2,2%

Kerentanan NULL Pointer Dereference pada mitsubishielectric fx3u-enet-l firmware, mitsubishielectric fx3u-enet-p502 firmware +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.

Rincian

Terbit di NVD

22 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 81,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-006_en.pdf patch · advisory vendor
• https://jvn.jp/vu/JVNVU94348759/index.html patch · advisory pihak ketiga
• https://us-cert.cisa.gov/ics/advisories/icsa-21-201-01 advisory pihak ketiga