CVE:CVE-2021-20598
CNNVD:CNNVD-202108-680
Mitsubishi Electric MELSEC iQ-R series是日本三菱电机（Mitsubishi Electric）公司的一款可编程逻辑控制器。
Mitsubishi Electric MELSEC iQ-R 系列产品存在授权问题漏洞，该漏洞源于产品登录模块的逻辑存在漏洞。攻击者可通过使用错误密码登录来锁定合法用户。以下产品及版本受到影响：Mitsubishi Electric MELSEC iQ-R R08/16/32/120SFCPU 所有固件版本，Mitsubishi Electric MELSEC iQ-R R08/16/32/120PSFCPU 所有固件版本。
solution:Upgrade mitsubishielectric r08sfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r16sfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r32sfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r120sfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r08psfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r16psfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r32psfcpu_firmware to a higher version than *; Upgrade mitsubishielectric r120psfcpu_firmware to a higher version than *