01 Record

CVE-2021-20609

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R

HighPUBLISHEDCNA: Mitsubishi

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 3.27% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 87.9% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2021-12-01 15:41Z4 YR AGO

Last updated

2024-08-03 17:45Z2 YR AGO

Reserved

2020-12-17

Assigning CNA

Mitsubishi

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-400Uncontrolled Resource ConsumptionClass

Data version

5.1

Document digest

1a05fa89956f085311704b1145f8887743f1fffb5afe6f0d44cc743cf665b957

05 Affected products

VendorProductVersionsPlatforms

Mitsubishi Electric CorporationMELSEC iQ-R Series R00CPUFirmware versions "24" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R01CPUFirmware versions "24" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R02CPUFirmware versions "24" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R04CPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R08CPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R16CPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R32CPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R120CPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R04ENCPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R08ENCPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R16ENCPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R32ENCPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R120ENCPUFirmware versions "57" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R08SFCPUFirmware versions "26" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R16SFCPUFirmware versions "26" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R32SFCPUFirmware versions "26" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R120SFCPUFirmware versions "26" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R08PCPUFirmware versions "29" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R16PCPUFirmware versions "29" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R32PCPUFirmware versions "29" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R120PCPUFirmware versions "29" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R08PSFCPUFirmware versions "08" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R16PSFCPUFirmware versions "08" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R32PSFCPUFirmware versions "08" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R120PSFCPUFirmware versions "08" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R16MTCPUOperating system software version "23" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R32MTCPUOperating system software version "23" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R64MTCPUOperating system software version "23" and prior—

Mitsubishi Electric CorporationMELSEC iQ-R Series R12CCPU-VFirmware versions "16" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q03UDECPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q04UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q06UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q10UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q13UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q20UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q26UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q50UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q100UDEHCPUThe first 5 digits of serial No. "23121" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q03UDVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q04UDVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q06UDVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q13UDVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q26UDVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q04UDPVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q06UDPVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q13UDPVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q26UDPVCPUThe first 5 digits of serial No. "23071" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q12DCCPU-VThe first 5 digits of serial No. "24031" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q24DHCCPU-VThe first 5 digits of serial No. "24031" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q24DHCCPU-VGThe first 5 digits of serial No. "24031" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q24DHCCPU-LSThe first 5 digits of serial No. "24031" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q26DHCCPU-LSThe first 5 digits of serial No. "24031" and prior—

Mitsubishi Electric CorporationMELSEC Q Series MR-MQ100Operating system software version "F" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q172DCPU-S1Operating system software version "W" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q173DCPU-S1Operating system software version "W" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q172DSCPUOperating system software version "Y" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q173DSCPUOperating system software version "Y" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q170MCPUOperating system software version "W" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q170MSCPUOperating system software version "Y" and prior—

Mitsubishi Electric CorporationMELSEC Q Series Q170MSCPU-S1Operating system software version "Y" and prior—

9 further entries not shown. The complete list is in the raw JSON document.

06 References

www.mitsubishielectric.comhttps://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdfvendor-advisory
jvn.jphttps://jvn.jp/vu/JVNVU94434051/index.htmlgovernment-resource
us-cert.cisa.govhttps://us-cert.cisa.gov/ics/advisories/icsa-21-334-02government-resource