CVE-2021-20598

2021-08-0616:53:47

Mitsubishi

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.6%

JSON

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.

CNA Affected

[
  {
    "product": "MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]