What’s Vulnerable › Vulnerabilities

CVE-2021-20606

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-17 · updated 2026-06-17
• Weakness: CWE-125

Description

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open malicious project file specially crafted by an attacker.

Affected products

• Mitsubishi Electric Corporation EZSocket: through 5.4
• Mitsubishi Electric Corporation GX Works2: through 1.606g
• Mitsubishi Electric Corporation MELSOFT Navigator: all versions

References

• https://jvn.jp/vu/JVNVU93817405/index.html
• https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-021_en.pdf
• https://jvn.jp/vu/JVNVU93817405/index.html
• https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-021_en.pdf

Get alerted when CVE-2021-20606 or the next vulnerability affects your stack