Vulnerabilities

TI-2022-14743 CVE-2022-33324 · GHSA-2j9m-jh56-7553

Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series

LOW 36

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01812 Published 2022-12-23 No fix listed CWE-404

TI-2022-08177 CVE-2022-24296 · GHSA-9mwc-7fwx-973c

Broken or risky cryptographic algorithm in Air Conditioning System G-150AD; Air…

LOW 35

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01167 Published 2022-06-08 No fix listed CWE-327

TI-2022-08876 CVE-2022-25163 · GHSA-p5m3-f8vg-7g3w

Improper input validation in Mitsubishi Electric MELSEC-Q Series QJ71E71-100; Mitsubishi…

MEDIUM 47

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02313 Published 2022-06-02 No fix listed CWE-20

TI-2021-03840 CVE-2021-20611 · GHSA-pmj6-jq7v-c2r6

Improper input validation in Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU

LOW 39

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MEL…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03179 Published 2021-12-01 No fix listed CWE-20

TI-2021-03839 CVE-2021-20610 · GHSA-c894-282r-px6w

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric…

LOW 39

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Ser…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03273 Published 2021-12-01 No fix listed CWE-130

TI-2021-03838 CVE-2021-20609 · GHSA-x5r4-fjpr-vr8v

Uncontrolled resource consumption in Mitsubishi Electric Corporation MELSEC iQ-R Series…

LOW 39

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120P…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03273 Published 2021-12-01 No fix listed CWE-400

TI-2021-03826 CVE-2021-20593 · GHSA-wwxr-fcr7-6w34

Improper authentication in Air Conditioning System/Centralized Controllers G-50A; GB-50A…

LOW 33

Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00853 Published 2021-07-13 No fix listed CWE-287

TI-2021-03828 CVE-2021-20595 · GHSA-rmww-xfp2-vx9m

XML external entity injection in Air Conditioning System/Centralized Controllers G-50A…

LOW 39

Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior,…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01781 Published 2021-07-13 No fix listed CWE-611

TI-2021-03822 CVE-2021-20589 · GHSA-q2w2-jjv8-fvww

Memory corruption in GOT2000 series; GOT SIMPLE series; GT SoftGOT2000; Tension Controller

LOW 36

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 m…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01476 Published 2021-05-19 No fix listed CWE-119

Vulnerabilities

Filters