CVE-2021-20596

2021-07-2211:02:56

Mitsubishi

www.cve.org

0.003 Low

EPSS

Percentile

69.2%

JSON

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.

CNA Affected

[
  {
    "product": "MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware version 1.14 and prior"
      }
    ]
  }
]