Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-20598

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mitsubishi

Description

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU

  • all versionsaffected

References