CVE-2021-20586
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller ...
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-VD" of RV-FR**-D-* all versions, controller "CR800-HD" of RH-FRH*-D-* all versions, controller "CR800-HRD" of RH-FRHR*-D-* all versions, controller "CR800-VR with R16RTCPU" of RV-FR**-R-* all versions, controller "CR800-HR with R16RTCPU" of RH-FRH*-R-* all versions, controller "CR800-HRR with R16RTCPU" of RH-FRHR*-R-* all versions, controller "CR800-VQ with Q172DSRCPU" of RV-FR**-Q-* all versions, controller "CR800-HQ with Q172DSRCPU" of RH-FRH*-Q-* all versions, controller "CR800-HRQ with Q172DSRCPU" of RH-FRHR*-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-CRH*-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-VD" of RV-FR**-D-* all versions, controller "CR800-HD" of RH-FRH*-D-* all versions, controller "CR800-HRD" of RH-FRHR*-D-* all versions, controller "CR800-VR with R16RTCPU" of RV-FR**-R-* all versions, controller "CR800-HR with R16RTCPU" of RH-FRH*-R-* all versions, controller "CR800-HRR with R16RTCPU" of RH-FRHR*-R-* all versions, controller "CR800-VQ with Q172DSRCPU" of RV-FR**-Q-* all versions, controller "CR800-HQ with Q172DSRCPU" of RH-FRH*-Q-* all versions, controller "CR800-HRQ with Q172DSRCPU" of RH-FRHR*-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-CRH*-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
- Record
CVE-2021-20586- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-VD" of RV-FR**-D-* all versions, controller "CR800-HD" of RH-FRH*-D-* all versions, controller "CR800-HRD" of RH-FRHR*-D-* all versions, controller "CR800-VR with R16RTCPU" of RV-FR**-R-* all versions, controller "CR800-HR with R16RTCPU" of RH-FRH*-R-* all versions, controller "CR800-HRR with R16RTCPU" of RH-FRHR*-R-* all versions, controller "CR800-VQ with Q172DSRCPU" of RV-FR**-Q-* all versions, controller "CR800-HQ with Q172DSRCPU" of RH-FRH*-Q-* all versions, controller "CR800-HRQ with Q172DSRCPU" of RH-FRHR*-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-CRH*-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
- Record
CVE-2021-20586- Updated
- 2026-11-02
EUVDEUVD-2021-8004 No score
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-VD" of RV-FR**-D-* all versions, controller "CR800-HD" of RH-FRH*-D-* all versions, controller "CR800-HRD" of RH-FRHR*-D-* all versions, controller "CR800-VR with R16RTCPU" of RV-FR**-R-* all versions, controller "CR800-HR with R16RTCPU" of RH-FRH*-R-* all versions, controller "CR800-HRR with R16RTCPU" of RH-FRHR*-R-* all versions, controller "CR800-VQ with Q172DSRCPU" of RV-FR**-Q-* all versions, controller "CR800-HQ with Q172DSRCPU" of RH-FRH*-Q-* all versions, controller "CR800-HRQ with Q172DSRCPU" of RH-FRHR*-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-CRH*-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
- Record
EUVD-2021-8004- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c9mw-29g5-hf3h
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller ...
Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-VD" of RV-FR**-D-* all versions, controller "CR800-HD" of RH-FRH*-D-* all versions, controller "CR800-HRD" of RH-FRHR*-D-* all versions, controller "CR800-VR with R16RTCPU" of RV-FR**-R-* all versions, controller "CR800-HR with R16RTCPU" of RH-FRH*-R-* all versions, controller "CR800-HRR with R16RTCPU" of RH-FRHR*-R-* all versions, controller "CR800-VQ with Q172DSRCPU" of RV-FR**-Q-* all versions, controller "CR800-HQ with Q172DSRCPU" of RH-FRH*-Q-* all versions, controller "CR800-HRQ with Q172DSRCPU" of RH-FRHR*-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-CRH*-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
- Record
GHSA-c9mw-29g5-hf3h- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
- mitsubishielectric rh12frh55 firmware
- mitsubishielectric rh12frh85 firmware
- mitsubishielectric rh12rfh70 firmware
- mitsubishielectric rh1frhr firmware
- mitsubishielectric rh20frh100 firmware
- mitsubishielectric rh20frh85 firmware
- mitsubishielectric rh3frh35 firmware
- mitsubishielectric rh3frh45 firmware
- mitsubishielectric rh3frh55 firmware
- mitsubishielectric rh3frhr firmware
- mitsubishielectric rh6frh35 firmware
- mitsubishielectric rh6frh45 firmware
Show 21 moreShow less
- mitsubishielectric rh6frh55 firmware
- mitsubishielectric rv13fr firmware
- mitsubishielectric rv13frl firmware
- mitsubishielectric rv13frlm\/c firmware
- mitsubishielectric rv13frm\/c firmware
- mitsubishielectric rv20fr firmware
- mitsubishielectric rv20frm\/c firmware
- mitsubishielectric rv2fr\(b\) firmware
- mitsubishielectric rv2fr firmware
- mitsubishielectric rv2frl\(b\) firmware
- mitsubishielectric rv2frl firmware
- mitsubishielectric rv4fr firmware
- mitsubishielectric rv4frl firmware
- mitsubishielectric rv4frlm\/c firmware
- mitsubishielectric rv4frm\/c firmware
- mitsubishielectric rv7fr firmware
- mitsubishielectric rv7frl firmware
- mitsubishielectric rv7frll firmware
- mitsubishielectric rv7frllm\/c firmware
- mitsubishielectric rv7frlm\/c firmware
- mitsubishielectric rv7frm\/c firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-20586 is a high vulnerability (CVSS 7.5) in Mitsubishielectric Rh12frh55 Firmware, published January 29, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. No source names a fixed version.