CVE-2021-20588

🗓️ 19 Feb 2021 20:15:13Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 17 Views

Improper length parameter handling vulnerability in Mitsubishi Electric FA Engineering Softwar

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-20588	19 Feb 202122:51	–	circl
CNNVD	Mitsubishi Electric FA Engineering Software Buffer Error Vulnerability	18 Feb 202100:00	–	cnnvd
CVE	CVE-2021-20588	19 Feb 202119:58	–	cve
Cvelist	CVE-2021-20588	19 Feb 202119:58	–	cvelist
EUVD	EUVD-2021-8006	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Engineering Software Products (Update H)	18 Feb 202107:00	–	ics
OSV	CVE-2021-20588	19 Feb 202120:15	–	osv
Prion	Input validation	19 Feb 202120:15	–	prion
Positive Technologies	PT-2021-14061 · Mitsubishi · Gx Works3 +39	19 Feb 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-20588	22 May 202520:59	–	redhatcve

NVD

Node

mitsubishielectric c_controller_module_setting_and_monitoring_tool

OR

mitsubishielectric cpu_module_logging_configuration_toolRange≤1.112r

OR

mitsubishielectric cw_configuratorRange≤1.011m

OR

mitsubishielectric data_transferRange≤3.44w

OR

mitsubishielectric ezsocket

OR

mitsubishielectric fr_configurator

OR

mitsubishielectric fr_configurator_sw3

OR

mitsubishielectric fr_configurator2Range≤1.24a

OR

mitsubishielectric gt_designer3Range≤1.250l

OR

mitsubishielectric gt_softgot1000Range≤3.245f

OR

mitsubishielectric gt_softgot2000Range≤1.250l

OR

mitsubishielectric gx_configurator-dpRange≤7.14q

OR

mitsubishielectric gx_configurator-qp

OR

mitsubishielectric gx_developerRange≤8.506c

OR

mitsubishielectric gx_explorer

OR

mitsubishielectric gx_iec_developer

OR

mitsubishielectric gx_logviewerRange≤1.115u

OR

mitsubishielectric gx_remoteservice-i

OR

mitsubishielectric gx_works2Range≤1.597x

OR

mitsubishielectric gx_works3Range≤1.070y

OR

mitsubishielectric iq_monozukuri_andonMatch-

OR

mitsubishielectric iq_monozukuri_process_remote_monitoringMatch-

OR

mitsubishielectric m_commdtm-hart

OR

mitsubishielectric m_commdtm-io-link

OR

mitsubishielectric melfa-worksRange≤4.4

OR

mitsubishielectric melsec_wincpu_setting_utility

OR

mitsubishielectric melsoft_em_software_development_kit

OR

mitsubishielectric melsoft_navigatorRange≤2.74c

OR

mitsubishielectric mh11_settingtool_version2Range≤2.004e

OR

mitsubishielectric mi_configurator

OR

mitsubishielectric mt_works2Range≤1.167z

OR

mitsubishielectric mx_componentRange≤5.001b

OR

mitsubishielectric network_interface_board_cc-link

OR

mitsubishielectric network_interface_board_cc_ie_control_utility

OR

mitsubishielectric network_interface_board_cc_ie_field_utility

OR

mitsubishielectric network_interface_board_mneth_utility

OR

mitsubishielectric px_developerRange≤1.53f

OR

mitsubishielectric rt_toolbox2Range≤3.73b

OR

mitsubishielectric rt_toolbox3Range≤1.82l

OR

mitsubishielectric setting/monitoring_tools_for_the_c_controller_module

OR

mitsubishielectric slmp_data_collectorRange≤1.04e

Source	Link
jvn	www.jvn.jp/vu/JVNVU92330101/index.html
jvn	www.jvn.jp/vu/JVNVU92330101
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-049-02
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf
mitsubishielectric	www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf

17 Jun 2026 03:34Current

CVSS 27.5

CVSS 3.17.5 - 9.8

EPSS0.05858

CWE-130 CWE-119

improper handling mitsubishi electric engineering software vulnerability dos condition remote attacker crafted reply packets cve-2021-20588