https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:40:44 +0000 https://vulnerability.circl.lu/vuln/cve-2021-20598 <p><strong>Affected:</strong> MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU</p> <p>Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.</p> <p><strong>Affected:</strong> MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU</p> <p>Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.</p> https://vulnerability.circl.lu/vuln/cve-2021-20598 https://vulnerability.circl.lu/vuln/icsa-21-250-01 <p>A remote attacker can leverage a brute-force attack to acquire legitimate usernames registered in the module. A remote attacker could obtain unprotected credentials by sniffing network traffic. A remote attacker could lock out a legitimate user by continually attempting to login with a known username and incorrect passwords.</p> <p>A remote attacker can leverage a brute-force attack to acquire legitimate usernames registered in the module. A remote attacker could obtain unprotected credentials by sniffing network traffic. A remote attacker could lock out a legitimate user by continually attempting to login with a known username and incorrect passwords.</p> https://vulnerability.circl.lu/vuln/icsa-21-250-01