mitsubishielectric Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for mitsubishielectric software and firmware.

← Back to All Vendors
CVE-2020-12013 CRITICAL
Component: mc_works32

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Ele...

📅 2020-07-16
CVSS 9.1 Dossier →
CVE-2020-12007 CRITICAL
Component: mc_works

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a des...

📅 2020-07-16
CVSS 9.8 Dossier →
Component: mc_works

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability....

📅 2020-07-16
CVSS 7.5 Dossier →
CVE-2020-12011 CRITICAL
Component: mc_works

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This i...

📅 2020-07-16
CVSS 9.8 Dossier →
Component: coreos

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model...

📅 2020-07-07
CVSS 7.5 Dossier →
CVE-2020-5599 CRITICAL
Component: coreos

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model...

📅 2020-07-07
CVSS 9.8 Dossier →
Component: coreos

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model...

📅 2020-07-07
CVSS 7.5 Dossier →
Component: coreos

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model...

📅 2020-07-07
CVSS 7.5 Dossier →
Component: coreos

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model...

📅 2020-07-07
CVSS 7.5 Dossier →
CVE-2020-5595 CRITICAL
Component: coreos

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model...

📅 2020-07-07
CVSS 9.8 Dossier →
Component: cpu_module_logging_configuration_tool

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and ...

📅 2020-06-30
CVSS 7.5 Dossier →
Component: cpu_module_logging_configuration_tool

Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, E...

📅 2020-06-30
CVSS 7.5 Dossier →
CVE-2020-5594 CRITICAL
Component: melsec_iq-r_firmware

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sens...

📅 2020-06-23
CVSS 9.8 Dossier →
Component: melsec_iq-r00cpu_firmware

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over t...

📅 2020-06-10
CVSS 7.5 Dossier →
Component: cr800-q_firmware

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (...

📅 2020-03-30
CVSS 7.5 Dossier →
CVE-2020-5547 CRITICAL
Component: iu1-1m20-d_firmware

Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version...

📅 2020-03-16
CVSS 9.8 Dossier →
Component: iu1-1m20-d_firmware

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of Mitsubish...

📅 2020-03-16
CVSS 8.8 Dossier →
CVE-2020-5545 CRITICAL
Component: iu1-1m20-d_firmware

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers t...

📅 2020-03-16
CVSS 9.8 Dossier →
CVE-2020-5544 CRITICAL
Component: iu1-1m20-d_firmware

Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1...

📅 2020-03-16
CVSS 9.8 Dossier →
CVE-2020-5543 CRITICAL
Component: iu1-1m20-d_firmware

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage ...

📅 2020-03-16
CVSS 9.8 Dossier →
CVE-2020-5542 CRITICAL
Component: iu1-1m20-d_firmware

Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and ear...

📅 2020-03-16
CVSS 9.8 Dossier →
CVE-2020-5531 CRITICAL
Component: mi5122-vw_firmware

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet po...

📅 2020-02-17
CVSS 9.8 Dossier →
Component: q03\/04\/06\/13\/26udvcpu_firmware

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q...

📅 2019-11-13
CVSS 5.9 Dossier →
CVE-2019-14931 CRITICAL
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote ...

📅 2019-10-28
CVSS 9.8 Dossier →
Page 5 of 6 (136 Total Records)