Priority HIGH 72
Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versi…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01237 · Published 2023-01-20 · No fix listed CWE-337
Priority MEDIUM 46
Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0227 · Published 2020-10-05 · Fixed in Version 18 and prior, Version 50 and prior +1 CWE-342
Priority MEDIUM 45
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSE…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01141 · Published 2023-11-06 · No fix listed CWE-306
Priority MEDIUM 44
Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Elec…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02382 · Published 2022-04-01 · No fix listed CWE-287
Priority MEDIUM 42
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01371 · Published 2022-04-01 · No fix listed CWE-312
Priority MEDIUM 41
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2023-03-03 · No fix listed CWE-256
Priority LOW 39
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R ser…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02151 · Published 2022-04-01 · No fix listed CWE-294
Priority LOW 39
Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Elec…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02134 · Published 2022-04-01 · No fix listed CWE-287
Priority LOW 38
Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all ve…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01258 · Published 2022-04-01 · No fix listed CWE-326
Priority LOW 33
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legit…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01344 · Published 2023-11-06 · No fix listed CWE-307
Priority LOW 29
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01162 · Published 2022-04-01 · No fix listed CWE-312