CVE-2021-20609

State: Published
Severity: 7.5 High
Published: Dec 1, 2021
Updated: Aug 3, 2024
Reserved: Dec 17, 2020

Description

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Mitsubishi

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
MELSEC iQ-R Series R00CPUMitsubishi Electric Corporation	Firmware versions "24" and priorAffected
MELSEC iQ-R Series R01CPUMitsubishi Electric Corporation	Firmware versions "24" and priorAffected
MELSEC iQ-R Series R02CPUMitsubishi Electric Corporation	Firmware versions "24" and priorAffected
MELSEC iQ-R Series R04CPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R08CPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R16CPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R32CPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R120CPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R04ENCPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R08ENCPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R16ENCPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R32ENCPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R120ENCPUMitsubishi Electric Corporation	Firmware versions "57" and priorAffected
MELSEC iQ-R Series R08SFCPUMitsubishi Electric Corporation	Firmware versions "26" and priorAffected
MELSEC iQ-R Series R16SFCPUMitsubishi Electric Corporation	Firmware versions "26" and priorAffected
MELSEC iQ-R Series R32SFCPUMitsubishi Electric Corporation	Firmware versions "26" and priorAffected
MELSEC iQ-R Series R120SFCPUMitsubishi Electric Corporation	Firmware versions "26" and priorAffected
MELSEC iQ-R Series R08PCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R16PCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R32PCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R120PCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R08PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R16PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R32PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R120PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R16MTCPUMitsubishi Electric Corporation	Operating system software version "23" and priorAffected
MELSEC iQ-R Series R32MTCPUMitsubishi Electric Corporation	Operating system software version "23" and priorAffected
MELSEC iQ-R Series R64MTCPUMitsubishi Electric Corporation	Operating system software version "23" and priorAffected
MELSEC iQ-R Series R12CCPU-VMitsubishi Electric Corporation	Firmware versions "16" and priorAffected
MELSEC Q Series Q03UDECPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q04UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q06UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q10UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q13UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q20UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q26UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q50UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q100UDEHCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC Q Series Q03UDVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q04UDVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q06UDVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q13UDVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q26UDVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q04UDPVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q06UDPVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q13UDPVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q26UDPVCPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23071" and priorAffected
MELSEC Q Series Q12DCCPU-VMitsubishi Electric Corporation	The first 5 digits of serial No. "24031" and priorAffected
MELSEC Q Series Q24DHCCPU-VMitsubishi Electric Corporation	The first 5 digits of serial No. "24031" and priorAffected
MELSEC Q Series Q24DHCCPU-VGMitsubishi Electric Corporation	The first 5 digits of serial No. "24031" and priorAffected
MELSEC Q Series Q24DHCCPU-LSMitsubishi Electric Corporation	The first 5 digits of serial No. "24031" and priorAffected
MELSEC Q Series Q26DHCCPU-LSMitsubishi Electric Corporation	The first 5 digits of serial No. "24031" and priorAffected
MELSEC Q Series MR-MQ100Mitsubishi Electric Corporation	Operating system software version "F" and priorAffected
MELSEC Q Series Q172DCPU-S1Mitsubishi Electric Corporation	Operating system software version "W" and priorAffected
MELSEC Q Series Q173DCPU-S1Mitsubishi Electric Corporation	Operating system software version "W" and priorAffected
MELSEC Q Series Q172DSCPUMitsubishi Electric Corporation	Operating system software version "Y" and priorAffected
MELSEC Q Series Q173DSCPUMitsubishi Electric Corporation	Operating system software version "Y" and priorAffected
MELSEC Q Series Q170MCPUMitsubishi Electric Corporation	Operating system software version "W" and priorAffected
MELSEC Q Series Q170MSCPUMitsubishi Electric Corporation	Operating system software version "Y" and priorAffected
MELSEC Q Series Q170MSCPU-S1Mitsubishi Electric Corporation	Operating system software version "Y" and priorAffected
MELSEC L Series L02CPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L06CPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L26CPUMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L02CPU-PMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L06CPU-PMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L26CPU-PMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L26CPU-BTMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELSEC L Series L26CPU-PBTMitsubishi Electric Corporation	The first 5 digits of serial No. "23121" and priorAffected
MELIPC Series MI5122-VWMitsubishi Electric Corporation	Firmware versions "05" and priorAffected

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdfvendor-advisory
https://jvn.jp/vu/JVNVU94434051/index.htmlgovernment-resource
https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.