Mitsubishi Melsec q173dscpu Firmware vulnerabilities

3 CVEs affecting Mitsubishi Melsec q173dscpu Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20611, published 2021-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20610, published 2021-12-01. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series…
CVE-2021-20609, published 2021-12-01. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R…
CVE-2021-20611, published 2021-12-01. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series…