CVE-2021-20597

🗓️ 06 Aug 2021 00:00:00Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 204 Views

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU module

Reporter	Title	Published	Views	Family All 16
attackerkb	CVE-2021-20597	6 Aug 202117:15	–	attackerkb
BDU FSTEC	MELSEC iQ-R Series Safety CPU Vulnerable Registration Data Account Information	13 May 202400:00	–	bdu_fstec
Circl	CVE-2021-20597	6 Aug 202116:38	–	circl
CNNVD	Mitsubishi Electric MELSEC iQ-R series 访问控制错误漏洞	6 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-20597	6 Aug 202100:00	–	cvelist
EUVD	EUVD-2021-8015	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric MELSEC iQ-R Series	7 Sep 202106:00	–	ics
NVD	CVE-2021-20597	6 Aug 202117:15	–	nvd
Prion	Design/Logic Flaw	6 Aug 202117:15	–	prion
Positive Technologies	PT-2021-8027 · Mitsubishi · Melsec Iq-R Series Sil2 Process Cpu Modules R08/16/32/120Psfcpu +1	5 Aug 202100:00	–	ptsecurity

NVD

Node

AND

mitsubishielectric r08sfcpu_firmware

mitsubishielectric r08sfcpuMatch-

Node

AND

mitsubishielectric r16sfcpu_firmware

mitsubishielectric r16sfcpuMatch-

Node

AND

mitsubishielectric r32sfcpu_firmware

mitsubishielectric r32sfcpuMatch-

Node

AND

mitsubishielectric r120sfcpu_firmware

mitsubishielectric r120sfcpuMatch-

Node

AND

mitsubishielectric r08psfcpu_firmware

mitsubishielectric r08psfcpuMatch-

Node

AND

mitsubishielectric r16psfcpu_firmware

mitsubishielectric r16psfcpuMatch-

Node

AND

mitsubishielectric r32psfcpu_firmware

mitsubishielectric r32psfcpuMatch-

Node

AND

mitsubishielectric r120psfcpu_firmware

mitsubishielectric r120psfcpuMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions \"26\" and prior"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions \"11\" and prior"
      }
    ]
  }
]

Source	Link
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-009_en.pdf
jvn	www.jvn.jp/vu/JVNVU98578731/index.html
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-250-01

17 Jun 2026 03:34Current

9Critical risk

Vulners AI Score9

CVSS 26.4

CVSS 3.19.1

EPSS0.0222

CWE-522