mitsubishielectric Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for mitsubishielectric software and firmware.

← Back to All Vendors
CVE-2019-14930 CRITICAL
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Undocumented hard-coded us...

📅 2019-10-28
CVSS 9.8 Dossier →
CVE-2019-14929 CRITICAL
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords...

📅 2019-10-28
CVSS 9.8 Dossier →
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A number of stored cross-s...

📅 2019-10-28
CVSS 5.4 Dossier →
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote ...

📅 2019-10-28
CVSS 7.5 Dossier →
CVE-2019-14926 CRITICAL
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow ...

📅 2019-10-28
CVSS 9.8 Dossier →
Component: smartrtu_firmware

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smar...

📅 2019-10-28
CVSS 6.5 Dossier →
Component: electric_fr_configurator2_firmware

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized wh...

📅 2019-07-26
CVSS 5.5 Dossier →
Component: electric_fr_configurator2

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue p...

📅 2019-07-26
CVSS 5.5 Dossier →
Component: qj71e71-100_firmware

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against t...

📅 2019-05-23
CVSS 7.5 Dossier →
Component: q03udvcpu_firmware

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10...

📅 2019-02-05
CVSS 7.5 Dossier →
CVE-2017-9638 CRITICAL
Component: e-designer

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary c...

📅 2018-04-17
CVSS 9.8 Dossier →
CVE-2017-9636 CRITICAL
Component: e-designer

Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary c...

📅 2018-04-17
CVSS 9.8 Dossier →
CVE-2017-9634 CRITICAL
Component: e-designer

Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory loc...

📅 2018-04-17
CVSS 9.8 Dossier →
Component: qj71e71-100_firmware

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versio...

📅 2017-02-13
CVSS 7.5 Dossier →
Component: qj71e71-100_firmware

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versio...

📅 2017-02-13
CVSS 8.6 Dossier →
CVE-2013-2817 UNKNOWN
Component: mc-worx_suite

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary pr...

📅 2014-02-24
CVSS 9.3 Dossier →
Page 6 of 6 (136 Total Records)