Cyber Resilience

CVE-2021-20596

High

Published: 22 July 2021

Published
22 July 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0057 69.2th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-20596 is a high-severity NULL Pointer Dereference (CWE-476) vulnerability in Mitsubishielectric Fx3U-Enet-L Firmware. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 30.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially…

more

crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.

CWE(s)
CWE-476

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

mitsubishielectric
fx3u-enet-l firmware
≤ 1.14
mitsubishielectric
fx3u-enet-p502 firmware
≤ 1.14
mitsubishielectric
fx3u-enet firmware
≤ 1.14

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References