Read the docs

Mitsubishi Electric Europe B.V.

Records161All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical49CVSS 9.0–10.0
CVSS high78CVSS 7.0–8.9

Exploited now

Mitsubishi Electric Europe B.V. records in CISA KEV

No Mitsubishi Electric Europe B.V. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gx Works3 33 records MEDIUM Gx Works2 26 records MEDIUM Gt Softgot2000 21 records MEDIUM Ezsocket 20 records MEDIUM Cw Configurator 19 records MEDIUM Fr Configurator2 19 records MEDIUM Mx Component 19 records MEDIUM Rt Toolbox3 19 records MEDIUM

Records

161 records

TI-2022-14737 CVE-2022-33318 · GHSA-3jhc-73h5-x7fx

Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64

Priority HIGH 73

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.50054 Published 2022-07-20 No fix listed CWE-502
TI-2022-19113 CVE-2022-40267 · GHSA-9vv4-3cf7-mqqr

Authentication Bypass Vulnerability in Web Server Function on MELSEC Series

Priority HIGH 72

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versi…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01237 Published 2023-01-20 No fix listed CWE-337
TI-2018-11487 CVE-2018-16060 · GHSA-rw74-237r-47cj

Mitsubishi Electric Europe B.V.

Priority HIGH 72

Mitsubishi Electric Europe B.V.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19612 Published 2021-10-15 No fix listed CWE-425
TI-2020-09670 CVE-2020-12011 · GHSA-p8wr-hxwm-p363

Out-of-bounds write in Mitsubishi Electric MC Works64

Priority HIGH 65

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29194 Published 2020-07-16 No fix listed CWE-787
TI-2018-11488 CVE-2018-16061 · GHSA-2g47-r68w-wq9w

Mitsubishi Electric Europe B.V.

Priority MEDIUM 60

Mitsubishi Electric Europe B.V.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04032 Published 2021-10-15 No fix listed CWE-79
TI-2023-01345 CVE-2023-1424 · GHSA-jrmr-8594-crxx

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Priority MEDIUM 55

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated at…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0344 Published 2023-05-24 No fix listed CWE-120
TI-2023-06346 CVE-2023-6943 · GHSA-8g5q-mp2w-j766

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')…

Priority MEDIUM 53

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02133 Published 2024-01-30 No fix listed CWE-470
TI-2023-03131 CVE-2023-3346 · GHSA-whh9-m2fc-3q2v

Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series

Priority MEDIUM 53

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02095 Published 2023-08-03 No fix listed CWE-120
TI-2021-03821 CVE-2021-20588 · GHSA-29pr-6732-fx67

Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool

Priority MEDIUM 52

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06881 Published 2021-02-19 No fix listed CWE-130
TI-2022-14740 CVE-2022-33321 · GHSA-xxp6-vwcq-7x73

Cleartext transmission of sensitive information in Mitsubishi Electric Corporation…

Priority MEDIUM 51

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2022-11-08 No fix listed CWE-319
TI-2023-04208 CVE-2023-4562 · GHSA-3728-9cr9-4xwr

Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module

Priority MEDIUM 50

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence prog…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01214 Published 2023-10-13 No fix listed CWE-287
TI-2022-12190 CVE-2022-29830 · GHSA-3p64-2ppg-fm8m

Hard-coded credentials in Mitsubishi Electric Corporation GX Works3

Priority MEDIUM 50

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote una…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01362 Published 2022-11-24 No fix listed CWE-321
TI-2021-03832 CVE-2021-20599 · GHSA-vf46-vqq9-hg36

Cleartext transmission of sensitive information in Mitsubishi Electric Corporation MELSEC…

Priority MEDIUM 50

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01402 Published 2021-10-14 No fix listed CWE-319
TI-2021-03820 CVE-2021-20587 · GHSA-66m6-mhcr-vj8v

Heap-based buffer overflow in Mitsubishi Electric Corporation CPU Module Logging…

Priority MEDIUM 49

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03886 Published 2021-02-19 No fix listed CWE-122
TI-2020-04614 CVE-2020-5647 · GHSA-cxvp-6fh6-vm2m

Improper access control vulnerability in TCP/IP function included in the firmware of GT14…

Priority MEDIUM 49

Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and ear…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04206 Published 2020-11-06 No fix listed
TI-2020-04611 CVE-2020-5644 · GHSA-886m-rmg5-rwvm

Buffer overflow in Mitsubishi Electric Corporation GT14 Model of GOT 1000 series

Priority MEDIUM 49

Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04544 Published 2020-11-06 No fix listed CWE-120
TI-2023-02667 CVE-2023-2846 · GHSA-f86h-3pcp-x4mw

Authentication Bypass Vulnerability in MELSEC-F Series main module

Priority MEDIUM 48

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the af…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0132 Published 2023-06-30 No fix listed CWE-294
TI-2023-01523 CVE-2023-1618 · GHSA-37vx-v53j-77pr

Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module

Priority MEDIUM 48

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 **** and prior allows a remote unauthenticated attacker to bypass authentication and illegally log into…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01132 Published 2023-05-19 No fix listed CWE-489
TI-2020-04620 CVE-2020-5653 · GHSA-795v-rg6h-pfqw

Buffer overflow in Mitsubishi Electric Corporation MELSEC iQ-R series

Priority MEDIUM 48

Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03209 Published 2020-10-30 No fix listed CWE-120
TI-2020-04615 CVE-2020-5648 · GHSA-fxq3-4vfx-993f

Improper neutralization of argument delimiters in a command ('Argument Injection')…

Priority MEDIUM 48

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03474 Published 2020-11-06 No fix listed CWE-88
Load more
Open these records in search →