Buffer overflow in Mitsubishielectric C_controller_module_setting_and_monitoring_tool
CVE-2021-20588
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer ver…
EPSS: 0.072 (93.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Mitsubishielectric C_controller_module_setting_and_monitoring_tool
- Mitsubishielectric Cpu_module_logging_configuration_tool
- Mitsubishielectric Cw_configurator
- Mitsubishielectric Data_transfer
- Mitsubishielectric Ezsocket
- Mitsubishielectric Fr_configurator
- Mitsubishielectric Fr_configurator2
- Mitsubishielectric Fr_configurator_sw3
- Mitsubishielectric Gt_designer3
- Mitsubishielectric Gt_softgot1000
Weakness classification (CWE)
Public proof-of-concept exploits
References
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (vendor-advisory)
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (government-resource)
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (government-resource)
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108 (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-20588?
- CVE-2021-20588 is a high-severity vulnerability in Mitsubishielectric C_controller_module_setting_and_monitoring_tool, classified under Improper Handling of Length Parameter Inconsistency. CVSS score: 7.5/10. Published 2021-02-19.
- How severe is CVE-2021-20588?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-20588 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.