{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU","vendor":"n/a","versions":[{"status":"affected","version":"Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions \"26\" and prior"},{"status":"affected","version":"Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions \"11\" and prior"}]}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r08sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"66D3AC7B-50E0-47D5-B0D1-07329D724EFE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r08sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"B185323A-C9E3-48A0-AD28-DA7AC7846E18","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r16sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AA81D5C7-46C8-4F0E-9550-D240DC0366F3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r16sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"C4BBE066-33C4-4410-85D3-4B77B3773330","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r32sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7FB53D61-6C69-4A4A-92B1-C10D0B8F0EC9","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r32sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"6F6304BE-DAEE-49AB-B0B1-CEE6878CBECE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r120sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8218130C-4E7D-4FB9-976B-2351977C82D4","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r120sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"515BDC46-5A1C-4A94-816A-B4751BB1B58D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r08psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5A63D33D-302A-428C-986F-FC3F83CE9C86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r08psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"EA37F2FC-8F75-4FEA-882D-87AD5CC1558E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r16psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FFB42739-E503-44B2-A020-0DB2B8791A81","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r16psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"17AD5875-B7D7-498B-9484-23049753133E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r32psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3B1F532B-8EAF-4E66-9AF5-5EEFF5A0BC23","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r32psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"0EC2594C-6067-40BA-B8B2-AEC9B9C7922F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r120psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B2C03EA2-34BF-4F86-A19C-2818788E092B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r120psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"CA3FB3E1-D7D3-424B-A207-D3C6F4365D12","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions \"26\" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions \"11\" and prior allows a remote unauthenticated attacker to login to the target unauthorizedly by sniffing network traffic and obtaining credentials when registering user information in the target or changing a password."},{"lang":"es","value":"La vulnerabilidad de credenciales insuficientemente protegidas en los módulos de CPU de seguridad de la serie MELSEC iQ-R de Mitsubishi Electric R08/16/32/120SFCPU, versiones de firmware \"26\" y anteriores, y en los módulos de CPU de proceso SIL2 de la serie MELSEC iQ-R de Mitsubishi Electric R08/16/32/120PSFCPU, todas las versiones, permite que un atacante remoto no autenticado inicie sesión en el objetivo de forma no autorizada mediante el olfateo del tráfico de red y la obtención de credenciales al registrar información de usuario en el objetivo o al cambiar una contraseña"}],"id":"CVE-2021-20597","lastModified":"2026-06-17T03:34:05.540","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":6.4,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-08-06T17:15:07.140","references":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Third Party Advisory"],"url":"https://jvn.jp/vu/JVNVU98578731/index.html"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-250-01"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-009_en.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://jvn.jp/vu/JVNVU98578731/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-250-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-009_en.pdf"}],"sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-522"}],"source":"nvd@nist.gov","type":"Primary"}]}