CVE-2021-20598

🗓️ 06 Aug 2021 16:53:47Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 158 Views

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU module

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2021-20598	6 Aug 202117:15	–	attackerkb
BDU FSTEC	MELSEC iQ-R Series Safety CPU Account Lockout	13 May 202400:00	–	bdu_fstec
Circl	CVE-2021-20598	6 Aug 202116:38	–	circl
CNNVD	Mitsubishi Electric MELSEC iQ-R series authorization issue vulnerabilities	6 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-20598	6 Aug 202116:53	–	cvelist
EUVD	EUVD-2021-8016	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric MELSEC iQ-R Series	7 Sep 202106:00	–	ics
NVD	CVE-2021-20598	6 Aug 202117:15	–	nvd
Prion	Design/Logic Flaw	6 Aug 202117:15	–	prion
Positive Technologies	PT-2021-8028	5 Aug 202100:00	–	ptsecurity

NVD

Node

AND

mitsubishielectric r08sfcpu_firmware

mitsubishielectric r08sfcpuMatch-

Node

AND

mitsubishielectric r16sfcpu_firmware

mitsubishielectric r16sfcpuMatch-

Node

AND

mitsubishielectric r32sfcpu_firmware

mitsubishielectric r32sfcpuMatch-

Node

AND

mitsubishielectric r120sfcpu_firmware

mitsubishielectric r120sfcpuMatch-

Node

AND

mitsubishielectric r08psfcpu_firmware

mitsubishielectric r08psfcpuMatch-

Node

AND

mitsubishielectric r16psfcpu_firmware

mitsubishielectric r16psfcpuMatch-

Node

AND

mitsubishielectric r32psfcpu_firmware

mitsubishielectric r32psfcpuMatch-

Node

AND

mitsubishielectric r120psfcpu_firmware

mitsubishielectric r120psfcpuMatch-

[
  {
    "product": "MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU98578731/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-010_en.pdf

17 Jun 2026 03:34Current

7High risk

Vulners AI Score7

CVSS 25

CVSS 3.15.3

EPSS0.01513

CWE-287