Priority MEDIUM 53
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior,…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02133 · Published 2024-01-30 · No fix listed CWE-470
Priority MEDIUM 52
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06881 · Published 2021-02-19 · No fix listed CWE-130
Priority MEDIUM 50
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote una…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01362 · Published 2022-11-24 · No fix listed CWE-321
Priority MEDIUM 49
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03886 · Published 2021-02-19 · No fix listed CWE-122
Priority MEDIUM 47
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02254 · Published 2022-02-11 · No fix listed CWE-22
Priority MEDIUM 45
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote un…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00904 · Published 2022-11-24 · No fix listed CWE-312
Priority MEDIUM 45
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01299 · Published 2022-02-11 · No fix listed CWE-428
Priority MEDIUM 44
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious prog…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00867 · Published 2022-05-19 · No fix listed CWE-275
Priority MEDIUM 42
Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information about the project file for MELSEC safety…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01417 · Published 2022-11-24 · No fix listed CWE-259
Priority MEDIUM 41
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versio…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00949 · Published 2024-01-30 · No fix listed CWE-306
Priority MEDIUM 41
Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure,…
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00185 · Published 2023-09-20 · No fix listed CWE-276
Priority LOW 39
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS).
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2024-07-02 · No fix listed CWE-269
Priority LOW 36
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00335 · Published 2024-07-02 · No fix listed CWE-269
Priority LOW 36
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legit…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00261 · Published 2023-11-30 · No fix listed CWE-73
Priority LOW 36
Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01331 · Published 2020-06-30 · No fix listed CWE-400
Priority LOW 36
Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01431 · Published 2020-06-30 · No fix listed CWE-611
Priority LOW 35
Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00227 · Published 2024-07-02 · No fix listed CWE-269
Priority LOW 35
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2024-07-02 · No fix listed CWE-269
Priority LOW 35
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 35
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 35
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 34
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remo…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00772 · Published 2022-11-24 · No fix listed CWE-312
Priority LOW 33
Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00189 · Published 2024-07-02 · No fix listed CWE-269
Priority LOW 33
Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allow…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00492 · Published 2022-11-24 · No fix listed CWE-259
Priority LOW 32
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensitive information.
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.01082 · Published 2022-11-24 · No fix listed CWE-522
Load more