Mitsubishi Electric MELSEC iQ-R Series

🗓️ 07 Sep 2021 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 44 Views

Mitsubishi Electric MELSEC iQ-R Series (Update B). Vulnerabilities: Exposure of Sensitive Information, Insufficiently Protected Credentials, Account Lockout Mechanism

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	The vulnerability of the microprogrammed software of the MELSEC iQ-R Series Safety CPU and Series SIL2 Process CPU modules, related to insufficient protection of registration data, allows a intruder to obtain the account information.	13 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of the MELSEC iQ-R Series Safety CPU and Series SIL2 Process CPU modules lies in the overly restrictive mechanism for blocking user accounts. This allows a malicious person to lock out the user account.	13 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of the MELSEC iQ-R Series Safety CPU and Series SIL2 Process CPU modules, which stems from the lack of protection for operational data, allows unauthorized access by intruders to the protected information.	14 May 202400:00	–	bdu_fstec
Circl	CVE-2021-20594	6 Aug 202116:38	–	circl
Circl	CVE-2021-20597	6 Aug 202116:38	–	circl
Circl	CVE-2021-20598	6 Aug 202116:38	–	circl
CNNVD	Mitsubishi Electric MELSEC iQ-R series 信息泄露漏洞	6 Aug 202100:00	–	cnnvd
CNNVD	Mitsubishi Electric MELSEC iQ-R series 访问控制错误漏洞	6 Aug 202100:00	–	cnnvd
CNNVD	Mitsubishi Electric MELSEC iQ-R series 授权问题漏洞	6 Aug 202100:00	–	cnnvd
CVE	CVE-2021-20594	6 Aug 202100:00	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-250-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-250-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

07 Sep 2021 06:00Current

8.2High risk

Vulners AI Score8.2

CVSS 26.4

CVSS 3.19.1

EPSS0.00888