mitsubishielectric Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for mitsubishielectric software and firmware.

← Back to All Vendors
Component: fx5uc_firmware

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSE...

📅 2022-04-01
CVSS 5.9 Dossier →
Component: fx5uc_firmware

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC i...

📅 2022-04-01
CVSS 8.1 Dossier →
CVE-2022-25158 CRITICAL
Component: fx5uc_firmware

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSE...

📅 2022-04-01
CVSS 9.1 Dossier →
CVE-2022-25157 CRITICAL
Component: fx5uc_firmware

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubis...

📅 2022-04-01
CVSS 9.1 Dossier →
Component: fx5uc_firmware

Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU al...

📅 2022-04-01
CVSS 8.1 Dossier →
Component: fx5uc_firmware

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubis...

📅 2022-04-01
CVSS 8.1 Dossier →
Component: cw_configurator

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code....

📅 2022-02-11
CVSS 8.3 Dossier →
Component: c_controller_interface_module_utility

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker coul...

📅 2022-02-11
CVSS 8.3 Dossier →
Component: fx3u-enet_firmware

Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX...

📅 2022-01-14
CVSS 7.5 Dossier →
Component: fx3u-enet_firmware

Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1...

📅 2022-01-14
CVSS 7.5 Dossier →
Component: gx_works2

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthent...

📅 2021-12-17
CVSS 7.5 Dossier →
Component: ezsocket

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and p...

📅 2021-12-17
CVSS 5.5 Dossier →
Component: ezsocket

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and ...

📅 2021-12-17
CVSS 5.5 Dossier →
Component: gt_softgot2000

Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model a...

📅 2021-11-23
CVSS 7.5 Dossier →
Component: smartrtu_firmware

Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php....

📅 2021-10-15
CVSS 6.1 Dossier →
Component: smartrtu_firmware

Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a dire...

📅 2021-10-15
CVSS 7.5 Dossier →
CVE-2021-20599 CRITICAL
Component: r08sfcpu_firmware

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/3...

📅 2021-10-14
CVSS 9.1 Dossier →
Component: r12ccpu-v_firmware

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a re...

📅 2021-10-08
CVSS 5.9 Dossier →
Component: r08sfcpu_firmware

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08...

📅 2021-08-06
CVSS 5.3 Dossier →
CVE-2021-20597 CRITICAL
Component: r08sfcpu_firmware

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "...

📅 2021-08-06
CVSS 9.1 Dossier →
Component: r08sfcpu_firmware

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFC...

📅 2021-08-06
CVSS 7.5 Dossier →
Component: gt_softgot2000

Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication...

📅 2021-08-05
CVSS 7.5 Dossier →
Component: fx3u-enet-l_firmware

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 ...

📅 2021-07-22
CVSS 7.5 Dossier →
Component: r00cpu_firmware

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)...

📅 2021-06-11
CVSS 7.5 Dossier →
Page 3 of 6 (136 Total Records)