Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Priority MEDIUM 45

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSE…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01141 Published 2023-11-06 No fix listed CWE-306
Priority LOW 33

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legit…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01344 Published 2023-11-06 No fix listed CWE-307
Priority MEDIUM 41

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2023-03-03 No fix listed CWE-256
Priority HIGH 72

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versi…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01237 Published 2023-01-20 No fix listed CWE-337
Priority LOW 29

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01162 Published 2022-04-01 No fix listed CWE-312
Priority MEDIUM 42

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01371 Published 2022-04-01 No fix listed CWE-312
Priority MEDIUM 44

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Elec…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02382 Published 2022-04-01 No fix listed CWE-287
TI-2020-12755 CVE-2020-16226 · GHSA-4548-gq2g-hw87

Mitsubishi Electric Multiple Products

Priority MEDIUM 46

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0227 Published 2020-10-05 Fixed in Version 18 and prior, Version 50 and prior +1 CWE-342