CVE-2021-20608

HIGH 7.5CVE-2021-20608 · Published 17/12/2021 · updated 17/06/2026

In short

CVE-2021-20608 is a HIGH (CVSS 7.5) vulnerability affecting gx works2 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gx works2 mitsubishielectric	`≤ 1.606g`	No fix yet

Description

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi Electric PLC by sending malicious crafted packets to tamper with the program file.

References

jvn.jp/vu/JVNVU93019896/index.html · Third Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-21-350-04 · Third Party Advisory
mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-020_en.pdf · Vendor Advisory

More vulnerabilities in gx works2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gx works2

mitsubishielectric

≤ 1.606g

No fix yet

Description

More vulnerabilities in gx works2

See all →