You are viewing this page in an unauthorized frame window.
This is a potential security issue, you are being redirected to
https://nvd.nist.gov
An official website of the United States government
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
The NVD has a
new announcement page with status updates, news, and how
to stay connected!
CVE-2021-20610
Detail
Modified
This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.
Current Description
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UDECPU All versions, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU All versions, MELSEC Q Series Q03/04/06/13/26UDVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q04/06/13/26UDPVCPU The first 5 digits of serial No. "23071" and prior, MELSEC Q Series Q12DCCPU-V All versions, MELSEC Q Series Q24DHCCPU-V(G) All versions, MELSEC Q Series Q24/26DHCCPU-LS All versions, MELSEC Q Series MR-MQ100 All versions, MELSEC Q Series Q172/173DCPU-S1 All versions, MELSEC Q Series Q172/172DSCPU All versions, MELSEC Q Series Q170MCPU All versions, MELSEC Q Series Q170MSCPU(-S1) All versions, MELSEC L Series L02/06/26CPU(-P) All versions, MELSEC L Series L26CPU-(P)BT All versions and MELIPC Series MI5122-VW All versions allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.
Metrics
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to nvd@nist.gov.
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "28" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmwa
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU,
CVE Modified by Mitsubishi Electric Corporation11/24/2022 10:15:10 PM
Action
Type
Old Value
New Value
Added
CVSS V3.1
Mitsubishi Electric Corporation AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU All versions, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "28" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmwa
CVE Modified by Mitsubishi Electric Corporation7/26/2022 11:15:10 AM
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, MELSEC i
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120SFCPU All versions, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and
CVE Modified by Mitsubishi Electric Corporation6/02/2022 10:15:27 AM
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UD
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, MELSEC iQ-R Series R16/32/64MTCPU Operating system software version "23" and prior, MELSEC i
CVE Modified by Mitsubishi Electric Corporation4/26/2022 3:15:47 PM
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UD
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UD
CVE Modified by Mitsubishi Electric Corporation1/28/2022 3:15:09 PM
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UD
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All versions, MELSEC Q Series Q03UD
Reanalysis by NIST12/03/2021 4:01:32 PM
Action
Type
Old Value
New Value
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melipc_mi5122-vw_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melipc_mi5122-vw:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:*:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_l02cpu\(-p\)_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_l02cpu\(-p\):-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_l06cpu\(-p\)_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_l06cpu\(-p\):-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_l26cpu-\(p\)bt_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_l26cpu-\(p\)bt:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_l26cpu\(-p\)_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_l26cpu\(-p\):-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_mr-mq100_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_mr-mq100:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q03udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q03udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q03udvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q03udvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q04udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q04udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q04udpvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q04udpvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q04udvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q04udvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q06udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q06udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q06udpvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q06udpvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q06udvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q06udvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q100udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q100udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q10udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q10udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q12dccpu-v_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q12dccpu-v:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q13udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q13udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q13udpvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q13udpvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q13udvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q13udvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q170mcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q170mcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q170mscpu\(-s1\)_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q170mscpu\(-s1\):-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q172dcpu-s1_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q172dcpu-s1:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q172dscpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q172dscpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q173dcpu-s1_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q173dcpu-s1:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q173dscpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q173dscpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q20udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q20udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q24dhccpu-ls_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q24dhccpu-ls:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q24dhccpu-v\(g\)_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q24dhccpu-v\(g\):-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q26dhccpu-ls_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q26dhccpu-ls:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q26udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q26udecpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q26udpvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q26udpvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q26udvcpu_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q26udvcpu:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:o:mitsubishi:melsec_q50udecpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_q50udecpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r00_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 24
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r00_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r01_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 24
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r01_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r02_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 24
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r02_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r04_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 57
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r04_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_intune:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r04_pcpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 29
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r04_pcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 57
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
OR
*cpe:2.3:a:zoom:meetings_for_chrome_os:*:*:*:*:*:*:*:* versions up to (excluding) 5.0.1
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r08_pcpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 29
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r08_pcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:controllers_for_zoom_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r08_sfcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r08_sfcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_blackberry:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.1
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 57
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r120_pcpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 29
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r120_pcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
OR
*cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r120_sfcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r120_sfcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
OR
*cpe:2.3:a:zoom:vdi_azure_virtual_desktop:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4.21112
*cpe:2.3:a:zoom:vdi_citrix:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4.21112
*cpe:2.3:a:zoom:vdi_vmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4.21112
*cpe:2.3:a:zoom:vdi_windows_meeting_client:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r12_ccpu-v_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r12_ccpu-v:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_blackberry:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.1
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 57
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
OR
*cpe:2.3:a:zoom:android_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1922
*cpe:2.3:a:zoom:iphone_os_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1082
*cpe:2.3:a:zoom:macos_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1340
*cpe:2.3:a:zoom:windows_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1081
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r16_mtcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_mtcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r16_pcpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 29
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_pcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:controllers_for_zoom_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r16_sfcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_sfcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_intune:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 57
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
OR
*cpe:2.3:a:zoom:android_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
*cpe:2.3:a:zoom:iphone_os_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
*cpe:2.3:a:zoom:macos_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
*cpe:2.3:a:zoom:windows_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r32_mtcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_mtcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r32_pcpu_firmware:*:*:*:*:*:*:*:* versions up to (including) 29
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_pcpu:-:*:*:*:*:*:*:*
Changed
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:controllers_for_zoom_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r32_sfcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_sfcpu:-:*:*:*:*:*:*:*
OR
*cpe:2.3:a:zoom:hybrid_mmr:*:*:*:*:*:*:*:* versions up to (excluding) 4.6.20211116.131
*cpe:2.3:a:zoom:hybrid_zproxy:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.1058.20211116
*cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_controller:*:*:*:*:*:*:*:* versions up to (excluding) 4.8.12.20211115
*cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_mmr:*:*:*:*:*:*:*:* versions up to (excluding) 4.8.12.20211115
*cpe:2.3:a:zoom:zoom_on-premise_recording_connector:*:*:*:*:*
AND
OR
*cpe:2.3:o:mitsubishi:melsec_iq-r_r64_mtcpu_firmware:*:*:*:*:*:*:*:*
OR
cpe:2.3:h:mitsubishi:melsec_iq-r_r64_mtcpu:-:*:*:*:*:*:*:*
Initial Analysis by NIST12/03/2021 3:31:39 PM
Action
Type
Old Value
New Value
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:controllers_for_zoom_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:controllers_for_zoom_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:controllers_for_zoom_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_blackberry:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.1
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_blackberry:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.1
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_intune:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:meetings_for_intune:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Added
CPE Configuration
AND
OR
*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.3
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Added
CPE Configuration
OR
*cpe:2.3:a:zoom:android_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1922
*cpe:2.3:a:zoom:iphone_os_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1082
*cpe:2.3:a:zoom:macos_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1340
*cpe:2.3:a:zoom:windows_meeting_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 5.7.6.1081
Added
CPE Configuration
OR
*cpe:2.3:a:zoom:android_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
*cpe:2.3:a:zoom:iphone_os_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
*cpe:2.3:a:zoom:macos_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
*cpe:2.3:a:zoom:windows_video_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.2
OR
*cpe:2.3:a:zoom:hybrid_mmr:*:*:*:*:*:*:*:* versions up to (excluding) 4.6.20211116.131
*cpe:2.3:a:zoom:hybrid_zproxy:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.1058.20211116
*cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_controller:*:*:*:*:*:*:*:* versions up to (excluding) 4.8.12.20211115
*cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_mmr:*:*:*:*:*:*:*:* versions up to (excluding) 4.8.12.20211115
*cpe:2.3:a:zoom:zoom_on-premise_recording_connector:*:*:*:*:*
Added
CPE Configuration
OR
*cpe:2.3:a:zoom:meetings_for_chrome_os:*:*:*:*:*:*:*:* versions up to (excluding) 5.0.1
Added
CPE Configuration
OR
*cpe:2.3:a:zoom:vdi_azure_virtual_desktop:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4.21112
*cpe:2.3:a:zoom:vdi_citrix:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4.21112
*cpe:2.3:a:zoom:vdi_vmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4.21112
*cpe:2.3:a:zoom:vdi_windows_meeting_client:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
Added
CPE Configuration
OR
*cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:* versions up to (excluding) 5.8.4
Added
CVSS V2
NIST (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Added
CVSS V3.1
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Added
CWE
NIST NVD-CWE-Other
Changed
Reference Type
https://jvn.jp/vu/JVNVU94434051/index.html No Types Assigned
https://jvn.jp/vu/JVNVU94434051/index.html Third Party Advisory
Changed
Reference Type
https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02 No Types Assigned
https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02 Third Party Advisory, US Government Resource
Changed
Reference Type
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf No Types Assigned
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
