ICSA-21-250-01: Mitsubishi electric melsec iq-r series safety cpu r08sfcpu vulnerability
Affected Software
16 affected components
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R08SFCPU: Firmware versions "26" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R16SFCPU: Firmware versions "26" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R32SFCPU: Firmware versions "26" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R120SFCPU: Firmware versions "26" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R08SFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R16SFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R32SFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R120SFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R08PSFCPU: Firmware versions "11" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R16PSFCPU: Firmware versions "11" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R32PSFCPU: Firmware versions "11" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R120PSFCPU: Firmware versions "11" and prior (CVE-2021-20594 and CVE-2021-20597)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R08PSFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R16PSFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R32PSFCPU: all versions (CVE-2021-20598)
: Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R120PSFCPU: all versions (CVE-2021-20598)
Event History
Feb 21, 2025
Advisory Published
06:20 AM
Frequently Asked Questions
1
What is the severity of ICSA-21-250-01?
The severity of ICSA-21-250-01 is critical due to potential remote code execution vulnerabilities.
2
How do I fix ICSA-21-250-01?
To fix ICSA-21-250-01, update the firmware of affected Mitsubishi Electric MELSEC iQ-R series Safety CPUs to version 27 or later.
3
What are the affected products in ICSA-21-250-01?
The affected products in ICSA-21-250-01 include Mitsubishi Electric MELSEC iQ-R series Safety CPU R08SFCPU, R16SFCPU, R32SFCPU, and R120SFCPU with specific firmware versions.
4
What vulnerabilities are associated with ICSA-21-250-01?
ICSA-21-250-01 is associated with multiple vulnerabilities, specifically CVE-2021-20594, CVE-2021-20597, and CVE-2021-20598.
5
Is there a workaround for ICSA-21-250-01?
Currently, it is recommended to apply firmware updates as an effective workaround for ICSA-21-250-01.