Vulnerability index

Browse CVEs

133 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Smartrtu Firmware MEDIUM 6.1
CVE-2018-16061

Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.

No fix yet
Fix from $1,600 2021-10-15
R08sfcpu Firmware HIGH 7.5
CVE-2021-20599

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/…

Mitigation only
Fix from $1,950 2021-10-14
R12ccpu V Firmware MEDIUM 5.9
CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a r…

Fix: after 16
Fix from $1,600 2021-10-08
R08sfcpu Firmware CRITICAL 9.1
CVE-2021-20597

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions …

Mitigation only
Fix from $2,300 2021-08-06
R08sfcpu Firmware HIGH 7.5
CVE-2021-20594

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SF…

Mitigation only
Fix from $1,950 2021-08-06
R08sfcpu Firmware MEDIUM 5.3
CVE-2021-20598

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R0…

Mitigation only
Fix from $1,600 2021-08-06
Gt Softgot2000 HIGH 7.5
CVE-2021-20592

Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communicatio…

Fix: after 1.256s
Fix from $1,950 2021-08-05
Fx3u Enet L Firmware HIGH 7.5
CVE-2021-20596

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502…

Fix: after 1.14
Fix from $1,950 2021-07-22
R00cpu Firmware HIGH 7.5
CVE-2021-20591

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN…

Mitigation only
Fix from $1,950 2021-06-11
Got2000 Gt27 Firmware HIGH 7.5
CVE-2021-20590

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server vers…

Fix: after 01.40.000
Fix from $1,950 2021-04-22
C Controller Module Setting And Monitoring Tool CRITICAL 9.8
CVE-2021-20588EPSS 7%

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration To…

Fix: after 3.44w
Fix from $2,300 2021-02-19
C Controller Module Setting And Monitoring Tool CRITICAL 9.8
CVE-2021-20587

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and pr…

Fix: after 3.44w
Fix from $2,300 2021-02-19
Rv2fr Firmware HIGH 7.5
CVE-2021-20586

Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "…

Mitigation only
Fix from $1,950 2021-01-29
Melsec Iq F Fx5u Cpu Firmware HIGH 7.4
CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to …

Fix: after 1.060
Fix from $1,950 2020-12-14
Gt2107 Wtbd Firmware HIGH 7.5
CVE-2020-5675

Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD…

Fix: after 01.39.000
Fix from $1,950 2020-12-04
R00cpu Firmware HIGH 7.5
CVE-2020-16850

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over…

Fix: after 52
Fix from $1,950 2020-11-30
R00cpu Firmware HIGH 7.5
CVE-2020-5668

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) …

Fix: after 51
Fix from $1,950 2020-11-20
Melsec Iq R00 Firmware HIGH 7.5
CVE-2020-5666EPSS 9%

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/…

Fix: after 51
Fix from $1,950 2020-11-16
Coreos CRITICAL 9.8
CVE-2020-5644

Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD"…

Fix: after 05.65.00.bd
Fix from $2,300 2020-11-06
Coreos CRITICAL 9.8
CVE-2020-5647

Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.6…

Fix: after 05.65.00.bd
Fix from $2,300 2020-11-06
Coreos CRITICAL 9.8
CVE-2020-5648

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 …

Fix: after 05.65.00.bd
Fix from $2,300 2020-11-06
Coreos HIGH 7.5
CVE-2020-5645

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD…

Fix: after 05.65.00.bd
Fix from $1,950 2020-11-06
Coreos HIGH 7.5
CVE-2020-5646

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05…

Fix: after 05.65.00.bd
Fix from $1,950 2020-11-06
Coreos HIGH 7.5
CVE-2020-5649

Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05…

Fix: after 05.65.00.bd
Fix from $1,950 2020-11-06
Melsec Iq Rj71eip91 Firmware HIGH 7.5
CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface M…

Mitigation only
Fix from $1,950 2020-11-02
Melsec Iq Rj71eip91 Firmware MEDIUM 6.5
CVE-2020-5657

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of MELSE…

Mitigation only
Fix from $1,600 2020-11-02
Melsec Iq Rj71eip91 Firmware CRITICAL 9.8
CVE-2020-5653

Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First…

Mitigation only
Fix from $2,300 2020-11-02
Melsec Iq Rj71eip91 Firmware CRITICAL 9.8
CVE-2020-5656

Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Modu…

Mitigation only
Fix from $2,300 2020-11-02
Melsec Q Q04udpvcpu Firmware HIGH 7.5
CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' an…

Mitigation only
Fix from $1,950 2020-11-02
Melsec Iq Rj71eip91 Firmware HIGH 7.5
CVE-2020-5654

Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module Firs…

Mitigation only
Fix from $1,950 2020-11-02