Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability...

9.1 CVSS

Vulnerability Description

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-20599

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

CVE-2025-8531

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Medium 6.8

CVE-2025-7731

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

High 7.5

CVE-2025-7405

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

High 7.3

CVE-2025-7376

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Medium 5.9

CVE-2025-5514

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Medium 5.3

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

MELSEC iQ-R Series Safety CPU R08SFCPU, MELSEC iQ-R series Safety CPU R16SFCPU, MELSEC iQ-R series Safety CPU R32SFCPU, MELSEC iQ-R series Safety CPU R120SFCPU, MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU, MELSEC iQ-R series SIL2 Process CPU R16PSFCPU, MELSEC iQ-R series SIL2 Process CPU R32PSFCPU, MELSEC iQ-R series SIL2 Process CPU R120PSFCPU

Vulnerable Versions:

Firmware versions "26" and prior, Firmware versions "11" and prior