VYPR
← Mitsubishielectric

Vendor CVEs

Mitsubishielectric

All CVEs

194 total · sorted by risk
  • CVE-2022-33318Jul 20, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.46

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33320Jul 20, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33315Jul 20, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33317Jul 20, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.00

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1,…

  • CVE-2022-33316Jul 20, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-29834Jul 20, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.01

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions…

  • CVE-2022-24296Jun 8, 2022
    Mitsubishielectric
    AG-150A-A
    risk 0.00cvss —epss 0.01

    Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and…

  • CVE-2022-25163Jun 2, 2022
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.02

    Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R…

  • CVE-2022-25162May 18, 2022
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.02

    Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80,…

  • CVE-2022-25161May 18, 2022
    Mitsubishielectric
    MELSEC iQ-F Series FX5-ENET
    risk 0.00cvss —epss 0.04

    Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80,…

  • CVE-2022-25160Apr 1, 2022
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.01

    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric…

  • CVE-2022-25158Apr 1, 2022
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.01

    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric…

  • CVE-2022-25159Apr 1, 2022
    Mitsubishielectric
    MELSEC iQ-F Series CPU module
    risk 0.00cvss —epss 0.02

    Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC…

  • CVE-2022-25157Apr 1, 2022
    Mitsubishielectric
    MELSEC iQ-F Series CPU module
    risk 0.00cvss —epss 0.02

    Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions,…

  • CVE-2022-25156Apr 1, 2022
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.01

    Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series…

  • CVE-2022-25155Apr 1, 2022
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.02

    Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions,…

  • CVE-2022-23128Jan 21, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.03

    Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97…

  • CVE-2022-23127Jan 21, 2022
    Mitsubishielectric
    MobileHMI
    risk 0.00cvss —epss 0.02

    Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any…

  • CVE-2022-23129Jan 21, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.00

    Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally.…

  • CVE-2022-23130Jan 21, 2022
    Mitsubishielectric
    GENESIS64
    risk 0.00cvss —epss 0.01

    Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97…

  • CVE-2021-20613Jan 14, 2022
    Mitsubishielectric
    FX3U-ENET
    risk 0.00cvss —epss 0.04

    Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS)…

  • CVE-2021-20612Jan 14, 2022
    Mitsubishielectric
    FX3U-ENET
    risk 0.00cvss —epss 0.04

    Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a…

  • CVE-2021-20607Dec 17, 2021
    Mitsubishielectric
    GX Works2
    risk 0.00cvss —epss 0.01

    Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by…

  • CVE-2021-20608Dec 17, 2021
    Mitsubishielectric
    GX Works2
    risk 0.00cvss —epss 0.03

    Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi…

  • CVE-2021-20606Dec 17, 2021
    Mitsubishielectric
    GX Works2
    risk 0.00cvss —epss 0.01

    Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by…

  • CVE-2021-20611Dec 1, 2021
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.03

    Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series…

  • CVE-2021-20610Dec 1, 2021
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.03

    Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series…

  • CVE-2021-20609Dec 1, 2021
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.03

    Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R…

  • CVE-2021-20601Nov 23, 2021
    Mitsubishielectric
    GOT2000 Series GT27
    risk 0.00cvss —epss 0.02

    Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions…

  • CVE-2021-20599Oct 14, 2021
    Mitsubishielectric
    MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU
    risk 0.00cvss —epss 0.01

    Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11"…

  • CVE-2021-20600Oct 8, 2021
    Mitsubishielectric
    MELSEC iQ-R Series C Controller Module / C Intelligent Function Module
    risk 0.00cvss —epss 0.02

    Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending a large number of packets in a short time…

  • CVE-2021-20598Aug 6, 2021
    Mitsubishielectric
    MELSEC iQ-F Series CPU module
    risk 0.00cvss —epss 0.02

    Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login…

  • CVE-2021-20594Aug 6, 2021
    Mitsubishielectric
    MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU
    risk 0.00cvss —epss 0.02

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU…

  • CVE-2021-20597Aug 6, 2021
    Mitsubishielectric
    MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU
    risk 0.00cvss —epss 0.02

    Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and…

  • CVE-2021-20592Aug 5, 2021
    Mitsubishielectric
    GOT2000 Series GT27
    risk 0.00cvss —epss 0.01

    Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT…

  • CVE-2021-20596Jul 22, 2021
    Mitsubishielectric
    FX3U-ENET
    risk 0.00cvss —epss 0.02

    NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending…

  • CVE-2021-20593Jul 13, 2021
    Mitsubishielectric
    AG-150A-A
    risk 0.00cvss —epss 0.01

    Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior,…

  • CVE-2021-20595Jul 13, 2021
    Mitsubishielectric
    GB-50A
    risk 0.00cvss —epss 0.02

    Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior,…

  • CVE-2021-20591Jun 11, 2021
    Mitsubishielectric
    MELSEC iQ-F Series CPU module
    risk 0.00cvss —epss 0.01

    Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a…

  • CVE-2021-20589May 19, 2021
    Mitsubishielectric
    GOT2000 Series GT27
    risk 0.00cvss —epss 0.01

    Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through…

  • CVE-2021-20590Apr 22, 2021
    Mitsubishielectric
    GOT2000 Series GT27
    risk 0.00cvss —epss 0.01

    Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model…

  • CVE-2021-27450Mar 25, 2021
    Mitsubishielectric
    MU320E
    risk 0.00cvss —epss 0.00

    SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E (all firmware versions prior to v04A00.1).

  • CVE-2021-20588Feb 19, 2021
    Mitsubishielectric
    CPU Module Logging Configuration Tool
    risk 0.00cvss —epss 0.06

    Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions…

  • CVE-2021-20586Jan 29, 2021
    Mitsubishielectric
    ASSISTA
    risk 0.00cvss —epss 0.03

    Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with…

  • CVE-2020-5665Dec 14, 2020
    Mitsubishielectric
    MELSEC iQ-F Series CPU module
    risk 0.00cvss —epss 0.01

    Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service (DoS) condition on program execution and communication by sending a specially crafted ARP packet.

  • CVE-2020-5675Dec 4, 2020
    Mitsubishielectric
    Tension Controller LE7-40GU-L series
    risk 0.00cvss —epss 0.03

    Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series…

  • CVE-2020-16850Nov 30, 2020
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.02

    Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is…

  • CVE-2020-5668Nov 20, 2020
    Mitsubishielectric
    MELSEC iQ-R Series
    risk 0.00cvss —epss 0.05

    Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version…

  • CVE-2020-5649Nov 6, 2020
    Mitsubishielectric
    GOT 1000 series
    risk 0.00cvss —epss 0.04

    Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and…

  • CVE-2020-5648Nov 6, 2020
    Mitsubishielectric
    GT14
    risk 0.00cvss —epss 0.03

    Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and…

Page 3 of 4