CVE-2021-20593

🗓️ 13 Jul 2021 13:30:59Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 42 Views

CVE-2021-20593 Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controller

Reporter	Title	Published	Views	Family All 8
CNNVD	Mitsubishi Electric Air Conditioning Systems 授权问题漏洞	1 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-20593	13 Jul 202113:30	–	cvelist
EUVD	EUVD-2021-8011	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric Air Conditioning System	1 Jul 202100:00	–	ics
NVD	CVE-2021-20593	13 Jul 202114:15	–	nvd
OSV	CVE-2021-20593	13 Jul 202114:15	–	osv
Prion	Design/Logic Flaw	13 Jul 202114:15	–	prion
RedhatCVE	CVE-2021-20593	22 May 202520:58	–	redhatcve

NVD

Node

mitsubishi g-50a_firmwareRange2.50–3.35

AND

mitsubishi g-50aMatch-

Node

mitsubishi gb-50a_firmwareRange2.50–3.35

AND

mitsubishi gb-50aMatch-

Node

mitsubishi ag-150a-a_firmwareRange≤3.20

AND

mitsubishi ag-150a-aMatch-

Node

mitsubishi ag-150a-j_firmwareRange≤3.20

AND

mitsubishi ag-150a-jMatch-

Node

mitsubishi gb-50ada-a_firmwareRange≤3.20

AND

mitsubishi gb-50ada-aMatch-

Node

mitsubishi gb-50ada-j_firmwareRange≤3.20

AND

mitsubishi gb-50ada-jMatch-

Node

mitsubishi eb-50gu-a_firmwareRange≤7.09

AND

mitsubishi eb-50gu-aMatch-

Node

mitsubishi eb-50gu-j_firmwareRange≤7.09

AND

mitsubishi eb-50gu-jMatch-

Node

mitsubishi ae-200a_firmwareRange≤7.93

AND

mitsubishi ae-200aMatch-

Node

mitsubishi ae-200e_firmwareRange≤7.93

AND

mitsubishi ae-200eMatch-

Node

mitsubishi ae-50a_firmwareRange≤7.93

AND

mitsubishi ae-50aMatch-

Node

mitsubishi ae-50e_firmwareRange≤7.93

AND

mitsubishi ae-50eMatch-

Node

mitsubishi ew-50a_firmwareRange≤7.93

AND

mitsubishi ew-50aMatch-

Node

mitsubishi ew-50e_firmwareRange≤7.93

AND

mitsubishi ew-50eMatch-

Node

mitsubishi te-200a_firmwareRange≤7.93

AND

mitsubishi te-200aMatch-

Node

mitsubishi te-50a_firmwareRange≤7.93

AND

mitsubishi te-50aMatch-

Node

mitsubishi tw-50a_firmwareRange≤7.93

AND

mitsubishi tw-50aMatch-

Node

mitsubishi cms-rmd-j_firmwareRange≤1.30

AND

mitsubishi cms-rmd-jMatch-

Node

mitsubishi pac-yg50eca_firmwareRange≤2.20

AND

mitsubishi pac-yg50ecaMatch-

[
  {
    "product": "Air Conditioning System/Centralized Controllers G-50A; GB-50A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.2.50 to Ver.3.35"
      },
      {
        "status": "affected",
        "version": "Ver.3.20 and prior"
      },
      {
        "status": "affected",
        "version": "Ver 7.09 and prior"
      },
      {
        "status": "affected",
        "version": "Ver 7.93 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.1.30 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.2.20 and prior"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU96046575/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-004_en.pdf

21 Nov 2024 05:46Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25.5

CVSS 3.17.1

EPSS0.00264

CWE-287