Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series...

7.5 CVSS

Vulnerability Description

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-20611

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

CVE-2025-8531

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Medium 6.8

CVE-2025-7731

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

High 7.5

CVE-2025-7405

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

High 7.3

CVE-2025-7376

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Medium 5.9

CVE-2025-5514

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Medium 5.3

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

MELSEC iQ-R Series R00CPU, MELSEC iQ-R Series R01CPU, MELSEC iQ-R Series R02CPU, MELSEC iQ-R Series R04CPU, MELSEC iQ-R Series R08CPU, MELSEC iQ-R Series R16CPU, MELSEC iQ-R Series R32CPU, MELSEC iQ-R Series R120CPU, MELSEC iQ-R Series R04ENCPU, MELSEC iQ-R Series R08ENCPU, MELSEC iQ-R Series R16ENCPU, MELSEC iQ-R Series R32ENCPU, MELSEC iQ-R Series R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R Series R120SFCPU, MELSEC iQ-R Series R08PCPU, MELSEC iQ-R Series R16PCPU, MELSEC iQ-R Series R32PCPU, MELSEC iQ-R Series R120PCPU, MELSEC iQ-R Series R08PSFCPU, MELSEC iQ-R Series R16PSFCPU, MELSEC iQ-R Series R32PSFCPU, MELSEC iQ-R Series R120PSFCPU, MELSEC iQ-R Series R16MTCPU, MELSEC iQ-R Series R32MTCPU, MELSEC iQ-R Series R64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04UDEHCPU, MELSEC Q Series Q06UDEHCPU, MELSEC Q Series Q10UDEHCPU, MELSEC Q Series Q13UDEHCPU, MELSEC Q Series Q20UDEHCPU, MELSEC Q Series Q26UDEHCPU, MELSEC Q Series Q50UDEHCPU, MELSEC Q Series Q100UDEHCPU, MELSEC Q Series Q03UDVCPU, MELSEC Q Series Q04UDVCPU, MELSEC Q Series Q06UDVCPU, MELSEC Q Series Q13UDVCPU, MELSEC Q Series Q26UDVCPU, MELSEC Q Series Q04UDPVCPU, MELSEC Q Series Q06UDPVCPU, MELSEC Q Series Q13UDPVCPU, MELSEC Q Series Q26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V, MELSEC Q Series Q24DHCCPU-VG, MELSEC Q Series Q24DHCCPU-LS, MELSEC Q Series Q26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172DCPU-S1, MELSEC Q Series Q173DCPU-S1, MELSEC Q Series Q172DSCPU, MELSEC Q Series Q173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU, MELSEC Q Series Q170MSCPU-S1, MELSEC L Series L02CPU, MELSEC L Series L06CPU, MELSEC L Series L26CPU, MELSEC L Series L02CPU-P, MELSEC L Series L06CPU-P, MELSEC L Series L26CPU-P, MELSEC L Series L26CPU-BT, MELSEC L Series L26CPU-PBT, MELIPC Series MI5122-VW

Vulnerable Versions:

Firmware versions "24" and prior, Firmware versions "57" and prior, Firmware versions "26" and prior, Firmware versions "29" and prior, Firmware versions "08" and prior, Operating system software version "23" and prior, Firmware versions "16" and prior, The first 5 digits of serial No. "23121" and prior, The first 5 digits of serial No. "23071" and prior, The first 5 digits of serial No. "24031" and prior, Operating system software version "F" and prior, Operating system software version "W" and prior, Operating system software version "Y" and prior, Firmware versions "05" and prior