ICSA-21-049-02: : mitsubishi electric cpu module logging configuration tool: version 1.112r and prior vulnerability
Affected Software
41 affected components
: Mitsubishi Electric CPU Module Logging Configuration Tool: Version 1.112R and prior
: Mitsubishi Electric CW Configurator: Version 1.011M and prior
: Mitsubishi Electric Data Transfer: Version 3.44W and prior
: Mitsubishi Electric EZSocket: Version 5.4 and prior
: Mitsubishi Electric FR Configurator
: Mitsubishi Electric FR Configurator SW3
: Mitsubishi Electric FR Configurator2: Version 1.24A and prior
: Mitsubishi Electric GT Designer3 Version1(GOT1000): Version 1.250L and prior
: Mitsubishi Electric GT Designer3 Version1(GOT2000): Version 1.250L and prior
: Mitsubishi Electric GT SoftGOT1000 Version3: Version 3.245F and prior
: Mitsubishi Electric GT SoftGOT2000 Version1: Version 1.250L and prior
: Mitsubishi Electric GX Configurator-DP: Version 7.14Q and prior
: Mitsubishi Electric GX Configurator-QP
: Mitsubishi Electric GX Developer: Version 8.506C and prior
: Mitsubishi Electric GX Explorer
: Mitsubishi Electric GX IEC Developer
: Mitsubishi Electric GX LogViewer: Version 1.115U and prior
: Mitsubishi Electric GX RemoteService-I
: Mitsubishi Electric GX Works2: Version 1.597X and prior
: Mitsubishi Electric GX Works3: Version 1.070Y and prior
: Mitsubishi Electric iQ Monozukuri ANDON (Data Transfer): Version 1.003D and prior
: Mitsubishi Electric iQ Monozukuri Process Remote Monitoring (Data Transfer): Version 1.002C and prior
: Mitsubishi Electric M_CommDTM-HART
: Mitsubishi Electric M_CommDTM-IO-Link: Version 1.03D and prior
: Mitsubishi Electric MELFA-Works: Version 4.4 and prior
: Mitsubishi Electric MELSEC WinCPU Setting Utility
: Mitsubishi Electric MELSOFT EM Software Development Kit (EM Configurator): Version 1.015R and prior
: Mitsubishi Electric MELSOFT Navigator: Version 2.74C and prior
: Mitsubishi Electric MH11 SettingTool Version2: Version 2.004E and prior
: Mitsubishi Electric MI Configurator: Version 1.004E and prior
: Mitsubishi Electric MT Works2: Version 1.167Z and prior
: Mitsubishi Electric MX Component: Version 5.001B and prior
: Mitsubishi Electric Network Interface Board CC IE Control utility: Version 1.29F and prior
: Mitsubishi Electric Network Interface Board CC IE Field Utility: Version 1.16S and prior
: Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility: Version 1.23Z and prior
: Mitsubishi Electric Network Interface Board MNETH utility: Version 34L and prior
: Mitsubishi Electric PX Developer: Version 1.53F and prior
: Mitsubishi Electric RT ToolBox2: Version 3.73B and prior
: Mitsubishi Electric RT ToolBox3: Version 1.82L and prior
: Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): Version 4.12N and prior
: Mitsubishi Electric SLMP Data Collector: Version 1.04E and prior
Event History
Jun 13, 2025
Advisory Published
01:30 AM
Frequently Asked Questions
1
What is the severity of ICSA-21-049-02?
ICSA-21-049-02 has been rated as a high severity vulnerability due to its potential impact on the confidentiality, integrity, and availability of affected systems.
2
What systems are affected by ICSA-21-049-02?
ICSA-21-049-02 affects various Mitsubishi Electric products including CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, and several versions of FR Configurator.
3
How do I fix ICSA-21-049-02?
To remediate ICSA-21-049-02, users should upgrade to the latest versions of affected Mitsubishi Electric products, following the vendor's update instructions.
4
What are the risks associated with ICSA-21-049-02?
The risks associated with ICSA-21-049-02 include unauthorized access and potential manipulation of industrial control system operations.
5
Is there any workaround for ICSA-21-049-02?
Currently, there are no known workarounds for ICSA-21-049-02, making updates the primary method of mitigation.