Read the docs

Mitsubishi Electric Europe B.V.

Records161All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical49CVSS 9.0–10.0
CVSS high78CVSS 7.0–8.9

Exploited now

Mitsubishi Electric Europe B.V. records in CISA KEV

No Mitsubishi Electric Europe B.V. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

33 records in Gx Works3 · all components

Priority MEDIUM 53

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02133 Published 2024-01-30 No fix listed CWE-470
Priority MEDIUM 52

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06881 Published 2021-02-19 No fix listed CWE-130
Priority MEDIUM 50

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote una…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01362 Published 2022-11-24 No fix listed CWE-321
Priority MEDIUM 49

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03886 Published 2021-02-19 No fix listed CWE-122
Priority MEDIUM 47

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02254 Published 2022-02-11 No fix listed CWE-22
Priority MEDIUM 44

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious prog…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00867 Published 2022-05-19 No fix listed CWE-275
Priority MEDIUM 42

Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information about the project file for MELSEC safety…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01417 Published 2022-11-24 No fix listed CWE-259
Priority MEDIUM 41

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versio…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00949 Published 2024-01-30 No fix listed CWE-306
Priority MEDIUM 41

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure,…

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00185 Published 2023-09-20 No fix listed CWE-276
Priority LOW 35

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01164 Published 2022-11-24 No fix listed CWE-321
Priority LOW 35

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01164 Published 2022-11-24 No fix listed CWE-321
Priority LOW 35

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01164 Published 2022-11-24 No fix listed CWE-321
Priority LOW 33

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allow…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00492 Published 2022-11-24 No fix listed CWE-259
Load more
Open these records in search →