CVE-2021-20612

Katalog CVE

CVSS 7.5 · High EPSS 3,6%

Kerentanan pada mitsubishielectric fx3u-enet firmware, mitsubishielectric fx3u-enet-l firmware +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product or other unspecified effects by sending specially crafted packets to an unnecessary opening of TCP port. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery.

Rincian

Terbit di NVD

14 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

3,6% peluang dieksploitasi; lebih tinggi dari 89,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-023_en.pdf advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-013-01 advisory pihak ketiga · pemerintah AS
• https://jvn.jp/vu/JVNVU93268332/index.html advisory pihak ketiga · vdb entry