Buffer overflow in Mitsubishielectric C_controller_module_setting_and_monitoring_tool
CVE-2021-20587
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZ…
Vulnerability class: Buffer Overflow
EPSS: 0.037 (88.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Mitsubishielectric C_controller_module_setting_and_monitoring_tool
- Mitsubishielectric Cpu_module_logging_configuration_tool
- Mitsubishielectric Cw_configurator
- Mitsubishielectric Data_transfer
- Mitsubishielectric Ezsocket
- Mitsubishielectric Fr_configurator
- Mitsubishielectric Fr_configurator2
- Mitsubishielectric Fr_configurator_sw3
- Mitsubishielectric Gt_designer3
- Mitsubishielectric Gt_softgot1000
Weakness classification (CWE)
Public proof-of-concept exploits
References
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (vendor-advisory)
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (government-resource)
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (government-resource)
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)
- af854a3a-2127-422b-91ae-364da2661108 (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-20587?
- CVE-2021-20587 is a high-severity vulnerability in Mitsubishielectric C_controller_module_setting_and_monitoring_tool, classified under Heap-based Buffer Overflow. CVSS score: 7.5/10. Published 2021-02-19.
- How severe is CVE-2021-20587?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-20587 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.