{"id":"CVE-2021-20586","aliases":["EUVD-2021-8004","GHSA-c9mw-29g5-hf3h"],"status":"published","title":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller ...","description":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02863,"percentile":0.8688,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2021-01-29T14:54:32Z","modified":"2026-06-17T03:34:03Z","products":[{"vendor":"mitsubishielectric","product":"rh12frh55_firmware"},{"vendor":"mitsubishielectric","product":"rh12frh85_firmware"},{"vendor":"mitsubishielectric","product":"rh12rfh70_firmware"},{"vendor":"mitsubishielectric","product":"rh1frhr_firmware"},{"vendor":"mitsubishielectric","product":"rh20frh100_firmware"},{"vendor":"mitsubishielectric","product":"rh20frh85_firmware"},{"vendor":"mitsubishielectric","product":"rh3frh35_firmware"},{"vendor":"mitsubishielectric","product":"rh3frh45_firmware"},{"vendor":"mitsubishielectric","product":"rh3frh55_firmware"},{"vendor":"mitsubishielectric","product":"rh3frhr_firmware"},{"vendor":"mitsubishielectric","product":"rh6frh35_firmware"},{"vendor":"mitsubishielectric","product":"rh6frh45_firmware"},{"vendor":"mitsubishielectric","product":"rh6frh55_firmware"},{"vendor":"mitsubishielectric","product":"rv13fr_firmware"},{"vendor":"mitsubishielectric","product":"rv13frl_firmware"},{"vendor":"mitsubishielectric","product":"rv13frlm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv13frm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv20fr_firmware"},{"vendor":"mitsubishielectric","product":"rv20frm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv2fr\\(b\\)_firmware"},{"vendor":"mitsubishielectric","product":"rv2fr_firmware"},{"vendor":"mitsubishielectric","product":"rv2frl\\(b\\)_firmware"},{"vendor":"mitsubishielectric","product":"rv2frl_firmware"},{"vendor":"mitsubishielectric","product":"rv4fr_firmware"},{"vendor":"mitsubishielectric","product":"rv4frl_firmware"},{"vendor":"mitsubishielectric","product":"rv4frlm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv4frm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv7fr_firmware"},{"vendor":"mitsubishielectric","product":"rv7frl_firmware"},{"vendor":"mitsubishielectric","product":"rv7frll_firmware"},{"vendor":"mitsubishielectric","product":"rv7frllm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv7frlm\\/c_firmware"},{"vendor":"mitsubishielectric","product":"rv7frm\\/c_firmware"}],"references":[{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20586"},{"url":"https://github.com/advisories/GHSA-c9mw-29g5-hf3h"}],"sources":{"cve":[{"id":"CVE-2021-20586","description":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.","status":"published","published":"2021-01-29T14:54:32Z","modified":"2024-08-03T17:45:44.779Z","updated_at":"2026-11-02T14:32:55.19484Z"}],"euvd":[{"id":"EUVD-2021-8004","description":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.","status":"published","published":"2021-01-29T14:54:32Z","modified":"2024-08-03T17:45:44Z","updated_at":"2026-11-03T03:25:08.888273Z"}],"ghsa":[{"id":"GHSA-c9mw-29g5-hf3h","title":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller ...","description":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.","status":"published","published":"2022-05-24T17:40:35Z","modified":"2023-01-27T05:02:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:42:04.146384Z"}],"nvd":[{"id":"CVE-2021-20586","description":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.","status":"published","published":"2021-01-29T15:15:12.833Z","modified":"2026-06-17T03:34:03.823Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:06:49.660551Z"}]}}