CVE-2021-20596
Quick assessment
Affected
n/a MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MELSEC-F FX3U-ENET是mitsubishielectric的一个以太网接口块。 MELSEC-F FX3U-ENET存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-20596
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
MELSEC-F FX3U-ENET代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MELSEC-F FX3U-ENET是mitsubishielectric的一个以太网接口块。 MELSEC-F FX3U-ENET存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502 | Firmware version 1.14 and prior | - |
|
II. Public POCs for CVE-2021-20596
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-20596
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-20596 (2)
-
https://us-cert.cisa.gov/ics/advisories/icsa-21-201-01 x_refsource_MISC
-
https://jvn.jp/vu/JVNVU94348759/index.html x_refsource_MISC
Other References for CVE-2021-20596 (1)
Same Patch Batch · n/a · 2021-07-22 · 58 CVEs total
| CVE-2021-36222 | MIT Kerberos 代码问题漏洞 | |
| CVE-2020-22284 | lwip 安全漏洞 | |
| CVE-2021-34261 | STMicroelectronics STM32Cube 安全漏洞 | |
| CVE-2021-34260 | STMicroelectronics STM32Cube 缓冲区错误漏洞 | |
| CVE-2021-34259 | STMicroelectronics STM32Cube Middleware 安全漏洞 | |
| CVE-2021-34262 | STMicroelectronics STM32Cube 缓冲区错误漏洞 | |
| CVE-2021-26224 | SourceCodester Fantastic-Blog-CMS 跨站脚本漏洞 | |
| CVE-2021-26223 | CASAP Automated Enrollment SQL注入漏洞 | |
| CVE-2021-33032 | EQ-3 eQ-3 HomeMatic CCU2 和 CCU3 操作系统命令注入漏洞 | |
| CVE-2020-36033 | Sourcecodester SourceCodester Water Billing System SQL注入漏洞 | |
| CVE-2021-27332 | CASAP Automated Enrollment 跨站脚本漏洞 | |
| CVE-2021-25197 | SourceCodester Content Management System 跨站脚本漏洞 | |
| CVE-2015-2098 | WebGate eDVR Manager 缓冲区溢出漏洞 | |
| CVE-2015-2099 | webgateinc WebGate Control Center 缓冲区溢出漏洞 | |
| CVE-2021-25202 | Bakeshop Inventory System SQL注入漏洞 | |
| CVE-2021-35464 | ForgeRock AM 代码问题漏洞 | |
| CVE-2015-2100 | webgateinc WebGate Control Center 缓冲区错误漏洞 | |
| CVE-2021-26226 | CASAP Automated Enrollment SQL注入漏洞 | |
| CVE-2021-35063 | Suricata 安全漏洞 | |
| CVE-2021-33478 | Broadcom Media exChange 缓冲区错误漏洞 |
Showing top 20 of 58 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-20596
No comments yet