{"cve":"CVE-2021-20586","nvd":{"published":"2021-01-29T15:15:12.833","modified":"2026-06-17T03:34:03.823","status":"Modified","description":"Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":[],"references":["https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf","https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf"],"products":["mitsubishielectric:rh12frh55_firmware","mitsubishielectric:rh12frh85_firmware","mitsubishielectric:rh12rfh70_firmware","mitsubishielectric:rh1frhr_firmware","mitsubishielectric:rh20frh100_firmware","mitsubishielectric:rh20frh85_firmware","mitsubishielectric:rh3frh35_firmware","mitsubishielectric:rh3frh45_firmware","mitsubishielectric:rh3frh55_firmware","mitsubishielectric:rh3frhr_firmware","mitsubishielectric:rh6frh35_firmware","mitsubishielectric:rh6frh45_firmware","mitsubishielectric:rh6frh55_firmware","mitsubishielectric:rv13fr_firmware","mitsubishielectric:rv13frl_firmware","mitsubishielectric:rv13frlm\\/c_firmware","mitsubishielectric:rv13frm\\/c_firmware","mitsubishielectric:rv20fr_firmware","mitsubishielectric:rv20frm\\/c_firmware","mitsubishielectric:rv2fr\\(b\\)_firmware","mitsubishielectric:rv2fr_firmware","mitsubishielectric:rv2frl\\(b\\)_firmware","mitsubishielectric:rv2frl_firmware","mitsubishielectric:rv4fr_firmware","mitsubishielectric:rv4frl_firmware","mitsubishielectric:rv4frlm\\/c_firmware","mitsubishielectric:rv4frm\\/c_firmware","mitsubishielectric:rv7fr_firmware","mitsubishielectric:rv7frl_firmware","mitsubishielectric:rv7frll_firmware","mitsubishielectric:rv7frllm\\/c_firmware","mitsubishielectric:rv7frlm\\/c_firmware","mitsubishielectric:rv7frm\\/c_firmware"],"source":"nvd","synced_at":"2026-10-19T21:14:10.479542811+00:00"},"epss":{"cve":"CVE-2021-20586","score":0.02863,"percentile":0.86766,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}