CVE-2021-20606

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

CVE-2021-20606

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

CVE-2021-20607

CVE-2021-20607 is an integer underflow vulnerability in Mitsubishi Electric FA Engineering Software affecting GX Works2 (versions ≤ 1.606G), MELSOFT Navigator (≤ 2.84N), and EZSocket (≤ 5.4). The issue arises when processing a specially crafted project file, causing a denial-of-service in the aff...

CVE-2021-20606

CVE-2021-20606 is an out-of-bounds read vulnerability affecting Mitsubishi Electric FA Engineering Software: GX Works2 ≤ 1.606G, MELSOFT Navigator ≤ 2.84N, and EZSocket ≤ 5.4. When a user opens a malicious project file, the software may read outside the intended buffer, potentially causing a Deni...

PT-2021-14075 · Mitsubishi · Melsoft Navigator +2

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric GX Works2 versions 1.606G and prior Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior Mitsubishi Electric EZSocket versions 5.4 and prior Description: The issue allows an attacker to cause a Denial of Service...

CVE-2021-20607: Integer Underflow (Wrap or Wraparound)

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

CVE-2021-20606: Out-of-bounds Read

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

Mitsubishi Electric FA Engineering Software (Update B)

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Vulnerabilities: Out-of-bounds Read, Integer Underflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-350-05...

CVE-2021-20587: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions...

CVE-2021-20588: Improper Handling of Length Parameter Inconsistency

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR...