← Back

CVE-2021-20606

nvd nist
Published: Dec 17, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open malicious project file specially crafted by an attacker.

Affected (3)

Mitsubishielectric
3 products
Ezsocket
Gx Works2
Melsoft Navigator
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ezsocket
Up to 5.4
Gx Works2
Up to 1.606g
Melsoft Navigator
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (6)

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
PatchThird Party Advisory
Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
Third Party AdvisoryUS Government Resource
Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.