CVE-2021-20596

Опубликовано: 22 июл. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.

Ссылки

https://jvn.jp/vu/JVNVU94348759/index.html
Patch
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-201-01
Third Party Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-006_en.pdf
Patch
Vendor Advisory
https://jvn.jp/vu/JVNVU94348759/index.html
Patch
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-201-01
Third Party Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-006_en.pdf
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:mitsubishielectric:fx3u-enet-l_firmware:*:*:*:*:*:*:*:*

Версия до 1.14 (включая)

cpe:2.3:o:mitsubishielectric:fx3u-enet-p502_firmware:*:*:*:*:*:*:*:*

Версия до 1.14 (включая)

cpe:2.3:o:mitsubishielectric:fx3u-enet_firmware:*:*:*:*:*:*:*:*

Версия до 1.14 (включая)

EPSS

Процентиль: 68%

0.00573

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-wrr3-chw5-r88x

github

больше 3 лет назад

EPSS

Процентиль: 68%

0.00573

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476