mitsubishielectric Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for mitsubishielectric software and firmware.

← Back to All Vendors
Component: got2000_gt27_firmware

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versi...

📅 2021-04-22
CVSS 7.5 Dossier →
Component: c_controller_module_setting_and_monitoring_tool

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Too...

📅 2021-02-19
CVSS 7.5 Dossier →
Component: c_controller_module_setting_and_monitoring_tool

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and pri...

📅 2021-02-19
CVSS 7.5 Dossier →
Component: rv2fr_firmware

Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "C...

📅 2021-01-29
CVSS 7.5 Dossier →
Component: melsec_iq-f_fx5u_cpu_firmware

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to c...

📅 2020-12-14
CVSS 7.4 Dossier →
Component: gt2107-wtbd_firmware

Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD ...

📅 2020-12-04
CVSS 7.5 Dossier →
Component: r00cpu_firmware

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over ...

📅 2020-11-30
CVSS 7.5 Dossier →
Component: r00cpu_firmware

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) C...

📅 2020-11-20
CVSS 7.5 Dossier →
Component: melsec_iq-r00_firmware

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/1...

📅 2020-11-16
CVSS 7.5 Dossier →
Component: coreos

Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05....

📅 2020-11-06
CVSS 7.5 Dossier →
CVE-2020-5648 CRITICAL
Component: coreos

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 M...

📅 2020-11-06
CVSS 9.8 Dossier →
CVE-2020-5647 CRITICAL
Component: coreos

Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65...

📅 2020-11-06
CVSS 9.8 Dossier →
Component: coreos

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05....

📅 2020-11-06
CVSS 7.5 Dossier →
Component: coreos

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD"...

📅 2020-11-06
CVSS 7.5 Dossier →
CVE-2020-5644 CRITICAL
Component: coreos

Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" ...

📅 2020-11-06
CVSS 9.8 Dossier →
Component: melsec_iq-rj71eip91_firmware

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Mo...

📅 2020-11-02
CVSS 7.5 Dossier →
CVE-2020-5657 MEDIUM
Component: melsec_iq-rj71eip91_firmware

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of MELSEC...

📅 2020-11-02
CVSS 6.5 Dossier →
CVE-2020-5656 CRITICAL
Component: melsec_iq-rj71eip91_firmware

Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Modul...

📅 2020-11-02
CVSS 9.8 Dossier →
Component: melsec_iq-rj71eip91_firmware

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Mod...

📅 2020-11-02
CVSS 7.5 Dossier →
Component: melsec_iq-rj71eip91_firmware

Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First...

📅 2020-11-02
CVSS 7.5 Dossier →
CVE-2020-5653 CRITICAL
Component: melsec_iq-rj71eip91_firmware

Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First ...

📅 2020-11-02
CVSS 9.8 Dossier →
Component: melsec_q-q04udpvcpu_firmware

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and...

📅 2020-11-02
CVSS 7.5 Dossier →
CVE-2020-16226 CRITICAL
Component: qj71mes96_firmware

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to rem...

📅 2020-10-05
CVSS 9.8 Dossier →
Component: mc_works

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This ...

📅 2020-07-16
CVSS 7.5 Dossier →
Page 4 of 6 (136 Total Records)