2 lines
6.2 KiB
JSON
2 lines
6.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU","vendor":"n/a","versions":[{"status":"affected","version":"all versions"}]}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r08sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"66D3AC7B-50E0-47D5-B0D1-07329D724EFE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r08sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"B185323A-C9E3-48A0-AD28-DA7AC7846E18","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r16sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AA81D5C7-46C8-4F0E-9550-D240DC0366F3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r16sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"C4BBE066-33C4-4410-85D3-4B77B3773330","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r32sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7FB53D61-6C69-4A4A-92B1-C10D0B8F0EC9","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r32sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"6F6304BE-DAEE-49AB-B0B1-CEE6878CBECE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r120sfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8218130C-4E7D-4FB9-976B-2351977C82D4","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r120sfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"515BDC46-5A1C-4A94-816A-B4751BB1B58D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r08psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5A63D33D-302A-428C-986F-FC3F83CE9C86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r08psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"EA37F2FC-8F75-4FEA-882D-87AD5CC1558E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r16psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FFB42739-E503-44B2-A020-0DB2B8791A81","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r16psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"17AD5875-B7D7-498B-9484-23049753133E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r32psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3B1F532B-8EAF-4E66-9AF5-5EEFF5A0BC23","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r32psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"0EC2594C-6067-40BA-B8B2-AEC9B9C7922F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:r120psfcpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B2C03EA2-34BF-4F86-A19C-2818788E092B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:r120psfcpu:-:*:*:*:*:*:*:*","matchCriteriaId":"CA3FB3E1-D7D3-424B-A207-D3C6F4365D12","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password."},{"lang":"es","value":"Una vulnerabilidad del Mecanismo de Bloqueo de Cuentas Demasiado Restrictivo en los módulos de CPU de la serie MELSEC iQ-R de Mitsubishi Electric (R08/16/32/120SFCPU todas las versiones, R08/16/32/120PSFCPU todas las versiones) permite a un atacante remoto no autenticado bloquear a un usuario legítimo al intentar iniciar sesión continuamente con una contraseña incorrecta"}],"id":"CVE-2021-20598","lastModified":"2026-06-17T03:34:05.657","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-08-06T17:15:07.173","references":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Third Party Advisory"],"url":"https://jvn.jp/vu/JVNVU98578731/index.html"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-010_en.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://jvn.jp/vu/JVNVU98578731/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-010_en.pdf"}],"sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"nvd@nist.gov","type":"Primary"}]}
|