Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

19 records

Priority MEDIUM 53

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02133 Published 2024-01-30 No fix listed CWE-470
Priority MEDIUM 41

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versio…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00949 Published 2024-01-30 No fix listed CWE-306
Priority MEDIUM 44

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious prog…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00867 Published 2022-05-19 No fix listed CWE-275
Priority MEDIUM 47

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02254 Published 2022-02-11 No fix listed CWE-22
Priority MEDIUM 52

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06881 Published 2021-02-19 No fix listed CWE-130
Priority MEDIUM 49

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03886 Published 2021-02-19 No fix listed CWE-122