CVE-2021-20586
Last modified
CVE-2021-20586 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with R16RTCPU" of RV-*FR***-R-* all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU" of RH-*FRHR***-R-* all versions, controller "CR800-*V*Q with Q172DSRCPU" of RV-*FR***-Q-* all versions, controller "CR800-*HQ with Q172DSRCPU" of RH-*FRH***-Q-* all versions, controller "CR800-*HRQ with Q172DSRCPU" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. EPSS estimates a 2.74% chance of exploitation in the next 30 days.
Description
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with R16RTCPU" of RV-*FR***-R-* all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU" of RH-*FRHR***-R-* all versions, controller "CR800-*V*Q with Q172DSRCPU" of RV-*FR***-Q-* all versions, controller "CR800-*HQ with Q172DSRCPU" of RH-*FRH***-Q-* all versions, controller "CR800-*HRQ with Q172DSRCPU" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishielectric | Rv2fr Firmware | All versions |
| Mitsubishielectric | Rv2frl Firmware | All versions |
| Mitsubishielectric | Rv4fr Firmware | All versions |
| Mitsubishielectric | Rv4frl Firmware | All versions |
| Mitsubishielectric | Rv7fr Firmware | All versions |
| Mitsubishielectric | Rv7frl Firmware | All versions |
| Mitsubishielectric | Rv7frll Firmware | All versions |
| Mitsubishielectric | Rv13fr Firmware | All versions |
| Mitsubishielectric | Rv13frl Firmware | All versions |
| Mitsubishielectric | Rv20fr Firmware | All versions |
| Mitsubishielectric | Rh1frhr Firmware | All versions |
| Mitsubishielectric | Rh3frhr Firmware | All versions |
| Mitsubishielectric | Rh3frh35 Firmware | All versions |
| Mitsubishielectric | Rh3frh45 Firmware | All versions |
| Mitsubishielectric | Rh3frh55 Firmware | All versions |
| Mitsubishielectric | Rh6frh35 Firmware | All versions |
| Mitsubishielectric | Rh6frh45 Firmware | All versions |
| Mitsubishielectric | Rh6frh55 Firmware | All versions |
| Mitsubishielectric | Rh12frh55 Firmware | All versions |
| Mitsubishielectric | Rh12rfh70 Firmware | All versions |
| Mitsubishielectric | Rh12frh85 Firmware | All versions |
| Mitsubishielectric | Rh20frh85 Firmware | All versions |
| Mitsubishielectric | Rh20frh100 Firmware | All versions |
| Mitsubishielectric | Rv2fr\(B\) Firmware | All versions |
| Mitsubishielectric | Rv2frl\(B\) Firmware | All versions |
| Mitsubishielectric | Rv4frm\/C Firmware | All versions |
| Mitsubishielectric | Rv4frlm\/C Firmware | All versions |
| Mitsubishielectric | Rv7frm\/C Firmware | All versions |
| Mitsubishielectric | Rv7frlm\/C Firmware | All versions |
| Mitsubishielectric | Rv7frllm\/C Firmware | All versions |
| Mitsubishielectric | Rv13frm\/C Firmware | All versions |
| Mitsubishielectric | Rv13frlm\/C Firmware | All versions |
| Mitsubishielectric | Rv20frm\/C Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-20586?
How severe is CVE-2021-20586?
How do I fix CVE-2021-20586?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-20580IBM Planning Analytics 2.0 could be vulnerable to cross-site…4.3
- CVE-2021-20581 IBM Security Verify Privilege On-Premises 11.5 could allow …4.3
- CVE-2021-20582IBM Security Secret Server up to 11.0 stores sensitive infor…5.3
- CVE-2021-20583IBM Security Verify (IBM Security Verify Privilege Vault 10.…4.9
- CVE-2021-20584IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allo…7.5
- CVE-2021-20585IBM Security Verify Access 20.07 could disclose sensitive in…5.3
- CVE-2021-20587Heap-based buffer overflow vulnerability in Mitsubishi Elect…9.8
- CVE-2021-20588Improper Handling of Length Parameter Inconsistency vulnerab…9.8
- CVE-2021-20589Buffer access with incorrect length value vulnerability in G…7.5
- CVE-2021-2059Vulnerability in the Oracle iStore product of Oracle E-Busin…5.3
- CVE-2021-20590Improper authentication vulnerability in GOT2000 series GT27…7.5
- CVE-2021-20591Uncontrolled Resource Consumption vulnerability in Mitsubish…7.5
Are you affected by CVE-2021-20586?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST