Read the docs

Mitsubishi Electric Europe B.V.

Records161All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical49CVSS 9.0–10.0
CVSS high78CVSS 7.0–8.9

Exploited now

Mitsubishi Electric Europe B.V. records in CISA KEV

No Mitsubishi Electric Europe B.V. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

26 records in Gx Works2 · all components

Priority MEDIUM 53

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02133 Published 2024-01-30 No fix listed CWE-470
Priority MEDIUM 52

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06881 Published 2021-02-19 No fix listed CWE-130
Priority MEDIUM 49

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03886 Published 2021-02-19 No fix listed CWE-122
Priority MEDIUM 47

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02254 Published 2022-02-11 No fix listed CWE-22
Priority MEDIUM 44

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious prog…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00867 Published 2022-05-19 No fix listed CWE-275
Priority MEDIUM 41

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versio…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00949 Published 2024-01-30 No fix listed CWE-306
Priority LOW 27

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00992 Published 2021-12-17 No fix listed CWE-191
Priority LOW 27

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows a…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00992 Published 2021-12-17 No fix listed CWE-125
Priority LOW 21

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00271 Published 2023-11-21 No fix listed CWE-20
Load more
Open these records in search →