CVE-2021-20586: High severity mitsubishi electric rv2fr(b) firmware vulnerability
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-VD" of RV-FR-D- all versions, controller "CR800-HD" of RH-FRH-D- all versions, controller "CR800-HRD" of RH-FRHR-D- all versions, controller "CR800-VR with R16RTCPU" of RV-FR-R- all versions, controller "CR800-HR with R16RTCPU" of RH-FRH-R- all versions, controller "CR800-HRR with R16RTCPU" of RH-FRHR-R- all versions, controller "CR800-VQ with Q172DSRCPU" of RV-FR-Q- all versions, controller "CR800-HQ with Q172DSRCPU" of RH-FRH-Q- all versions, controller "CR800-HRQ with Q172DSRCPU" of RH-FRHR-Q- all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D- all versions, controller "CR800-CHD" of RH-CRH-D- all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D- all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20586?
CVE-2021-20586 is assessed as a medium severity vulnerability due to potential impacts on resource management.
How do I fix CVE-2021-20586?
To fix CVE-2021-20586, update the affected Mitsubishi Electric robot controller firmware to the latest version as recommended by the vendor.
What products are affected by CVE-2021-20586?
CVE-2021-20586 affects several models within the MELFA FR Series, including controllers CR800-*V*D and CR800-*HD.*
Can CVE-2021-20586 be exploited remotely?
CVE-2021-20586 may allow an attacker to exploit the vulnerability if proper access controls are not enforced.
Is there a workaround for CVE-2021-20586?
There is no known workaround for CVE-2021-20586; the only mitigation is to update to the latest firmware.