CVE-2021-20608: Mitsubishielectric Gx WORKS2

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi Electric PLC by sending malicious crafted packets to tamper with the program file.

Affected products

• Mitsubishielectric Gx WORKS2: up to and including 1.606g

Published 2021-12-17. Last modified 2026-06-17.