mitsubishielectric Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for mitsubishielectric software and firmware.

← Back to All Vendors
Component: melsec_iq-f_fx5-enet\/ip_firmware

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all ...

📅 2026-03-03
CVSS 7.5 Dossier →
Component: melsec_iq-f_fx5-eip_firmware

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions ...

📅 2026-03-03
CVSS 7.5 Dossier →
Component: melsec_iq-f_fx5-eip_firmware

Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/...

📅 2026-03-03
CVSS 7.5 Dossier →
CVE-2023-6815 MEDIUM
Component: r08sfcpu_firmware

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELS...

📅 2024-02-13
CVSS 6.5 Dossier →
CVE-2023-6943 CRITICAL
Component: ezsocket

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions ...

📅 2024-01-30
CVSS 9.8 Dossier →
Component: ezsocket

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT...

📅 2024-01-30
CVSS 7.5 Dossier →
CVE-2023-6374 MEDIUM
Component: melsec_ws0-geth00200_firmware

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a re...

📅 2024-01-30
CVSS 5.9 Dossier →
Component: gx_works2

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the fun...

📅 2023-11-30
CVSS 2.5 Dossier →
Component: gx_works2

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the fun...

📅 2023-11-30
CVSS 2.5 Dossier →
Component: gx_works3

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products a...

📅 2023-11-30
CVSS 7.8 Dossier →
CVE-2023-4699 CRITICAL
Component: fx3u-32mt\/es_firmware

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC ...

📅 2023-11-06
CVSS 10.0 Dossier →
CVE-2023-4625 MEDIUM
Component: fx5u-32mt\/es_firmware

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web ser...

📅 2023-11-06
CVSS 5.3 Dossier →
CVE-2023-4562 CRITICAL
Component: fx3g-14_mr\/ds_firmware

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obta...

📅 2023-10-13
CVSS 9.1 Dossier →
CVE-2023-4088 CRITICAL
Component: gx_works3

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local atta...

📅 2023-09-20
CVSS 9.3 Dossier →
CVE-2023-3373 MEDIUM
Component: gt21_firmware

Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior a...

📅 2023-08-04
CVSS 5.9 Dossier →
Component: gt_designer3

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model version...

📅 2023-08-04
CVSS 7.5 Dossier →
CVE-2023-3346 CRITICAL
Component: c80_firmware

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker ...

📅 2023-08-03
CVSS 9.8 Dossier →
Component: fx3u-16mr\/es_firmware

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticat...

📅 2023-06-30
CVSS 7.5 Dossier →
CVE-2023-2063 MEDIUM
Component: fx5-enet\/ip_firmware

Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module...

📅 2023-06-02
CVSS 6.3 Dossier →
CVE-2023-2062 MEDIUM
Component: fx5-enet\/ip_firmware

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD...

📅 2023-06-02
CVSS 6.2 Dossier →
CVE-2023-2061 MEDIUM
Component: fx5-enet\/ip_firmware

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC...

📅 2023-06-02
CVSS 6.2 Dossier →
Component: fx5-enet\/ip_firmware

Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC...

📅 2023-06-02
CVSS 7.5 Dossier →
CVE-2023-1424 CRITICAL
Component: melsec_iq-fx5u-32mr\/ds_firmware

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules...

📅 2023-05-24
CVSS 10.0 Dossier →
Component: melsec_ws0-geth00200_firmware

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 **** and prior allows a remote un...

📅 2023-05-19
CVSS 7.5 Dossier →
Page 1 of 6 (136 Total Records)