Rewterz Threat Advisory – ICS: Mitsubishi Electric MELSEC-F Series

Severity

High

Analysis Summary

CVE-2021-20613 

An attacker could send a specially crafted packet that could create a denial-of-service condition in the communication function of the product. A system reset is required for recovery.

CVE-2021-20612 

The affected product is vulnerable due to a lack of administrative controls, which may allow an attacker to remotely send specially crafted packets and cause a denial-of-service condition or other unspecified effects.

Impact

• Denial of Service

Affected Vendors

• Mitsubishi Electric

Affected Products

• Mitsubishi FX3U-ENET 1.14
• Mitsubishi FX3U-ENET-L 1.14
• Mitsubishi FX3U-ENET-P502 1.14

Remediation

Refer to CISA Advisory for the patch, upgrade, or suggested workaround information.
CVE-2021-20613

CVE-2021-20612