Security Vulnerabilities fixed in Mitsubishi CPU Module Logging Configuration Tool 2020-021

Description

Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electronic CPU Module Logging Configuration Tool version 1.112R and earlier allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.

Affected Applications

CPU Module Logging Configuration Tool

CVE References

CVE-2021-20588 CVE-2021-20587

Other References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf