NetSight
IP …
medium5.3

CVE-2021-20598

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/12…

Impact

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.

Affected products

VendorProductAffected versions
MitsubishielectricR08sfcpu Firmware
All versions
MitsubishielectricR16sfcpu Firmware
All versions
MitsubishielectricR32sfcpu Firmware
All versions
MitsubishielectricR120sfcpu Firmware
All versions
MitsubishielectricR08psfcpu Firmware
All versions
MitsubishielectricR16psfcpu Firmware
All versions
MitsubishielectricR32psfcpu Firmware
All versions
MitsubishielectricR120psfcpu Firmware
All versions

Weakness classification

CWE-287

References