Read the docs
TI-2021-03819 Aliases CVE-2021-20586GHSA-c9mw-29g5-hf3h

Resource management errors vulnerability in a robot controller of MELFA FR…

Priority LOW 38Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with R16RTCPU" of RV-*FR***-R-* all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU" of RH-*FRHR***-R-* all versions, controller "CR800-*V*Q with Q172DSRCPU" of RV-*FR***-Q-* all versions, controller "CR800-*HQ with Q172DSRCPU" of RH-*FRH***-Q-* all versions, controller "CR800-*HRQ with Q172DSRCPU" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.

Why it matters now

EPSS 0.02863 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Robot Controller MELFA FR Series; Robot Controller CR Series; Cooperative Robot ASSISTAall versions; all versions; all versions—No fix listedCNA
  • Robot Controller MELFA FR Series; Robot Controller CR Series; Cooperative Robot ASSISTA Vendor— Affected all versions; all versions; all versions Fixed in — No fix listed CNA

CPE configurations NVD · 66

CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:rv2fr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv2fr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv2frl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv2frl:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv4fr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv4fr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv4frl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv4frl:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv7fr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv7fr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
Show 56 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:rv7frl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv7frl:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv7frll_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv7frll:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv13fr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv13fr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv13frl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv13frl:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv20fr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv20fr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh1frhr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh1frhr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh3frhr_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh3frhr:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh3frh35_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh3frh35:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh3frh45_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh3frh45:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh3frh55_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh3frh55:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh6frh35_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh6frh35:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh6frh45_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh6frh45:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh6frh55_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh6frh55:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh12frh55_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh12frh55:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh12rfh70_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh12rfh70:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh12frh85_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh12frh85:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh20frh85_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh20frh85:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rh20frh100_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rh20frh100:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv2fr\(b\)_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv2fr\(b\):-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv2frl\(b\)_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv2frl\(b\):-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv4frm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv4frm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv4frlm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv4frlm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv7frm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv7frm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv7frlm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv7frlm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv7frllm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv7frllm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv13frm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv13frm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv13frlm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv13frlm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:rv20frm\/c_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:rv20frm\/c:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20586
  2. 2026-10-03 Alias added: GHSA-c9mw-29g5-hf3h

References

Sources