Browse CVEs

HIGH 7.5 CVE-2022-29826 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(G… Gx Works3 after 1.086q Fix from $1,9502022-11-25 HIGH 7.5 CVE-2022-29827 Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated att… Gx Works3 after 1.086q Fix from $1,9502022-11-25 HIGH 7.5 CVE-2022-29828 Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated att… Gx Works3 after 1.086q Fix from $1,9502022-11-25 HIGH 7.5 CVE-2022-29829 Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) ve… Gx Works3 after 1.086q Fix from $1,9502022-11-25 HIGH 7.5 CVE-2022-29831 Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated … Gx Works3 after 1.086q Fix from $1,9502022-11-25 MEDIUM 6.5 CVE-2022-29832 Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 … Gx Works3 after 1.086q Fix from $1,6002022-11-25 MEDIUM 6.5 CVE-2022-29833 Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthentic… Gx Works3 after 1.086q Fix from $1,6002022-11-25 HIGH 7.5 CVE-2022-25164 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX O… Gx Works3 after 1.086q Fix from $1,9502022-11-25 MEDIUM 6.5 CVE-2022-40266 Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric… Got2000 Gt27 Firmware after 01.39.000 Fix from $1,6002022-11-24 MEDIUM 6.1 CVE-2022-33322 Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapte… Mac 587if E Firmware after 80.00 Fix from $1,6002022-11-08 CRITICAL 9.8 CVE-2022-33321 Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric cons… Mac 557if E Firmware Mitigation only Fix from $2,3002022-11-08 HIGH 7.5 CVE-2022-24946 Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MEL… Q03udecpu Firmware Mitigation only Fix from $1,9502022-06-15 CRITICAL 9.8 CVE-2020-14496 Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions c… Cpu Module Logging Configuration Tool 1.011m / 1.015r+ Fix from $2,3002022-05-19 HIGH 8.6 CVE-2022-25161 Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 1… Melsec Iq Fx5u 32mt\/es Firmware 1.270+ Fix from $1,9502022-05-18 MEDIUM 5.3 CVE-2022-25162 Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 1… Melsec Iq Fx5u 32mt\/es Firmware 1.270+ Fix from $1,6002022-05-18 CRITICAL 9.1 CVE-2022-25157 Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubi… Fx5uc Firmware Mitigation only Fix from $2,3002022-04-01 CRITICAL 9.1 CVE-2022-25158 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELS… Fx5uc Firmware Mitigation only Fix from $2,3002022-04-01 HIGH 8.1 CVE-2022-25155 Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubi… Fx5uc Firmware Mitigation only Fix from $1,9502022-04-01 HIGH 8.1 CVE-2022-25156 Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU a… Fx5uc Firmware Mitigation only Fix from $1,9502022-04-01 HIGH 8.1 CVE-2022-25159 Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC … Fx5uc Firmware Mitigation only Fix from $1,9502022-04-01 MEDIUM 5.9 CVE-2022-25160 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELS… Fx5uc Firmware Mitigation only Fix from $1,6002022-04-01 CRITICAL 9.8 CVE-2020-14521 Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker cou… C Controller Interface Module Utility after 3.42u Fix from $2,3002022-02-11 CRITICAL 9.8 CVE-2020-14523 Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code. Cw Configurator after 2.70y Fix from $2,3002022-02-11 HIGH 7.5 CVE-2021-20612 Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version … Fx3u Enet Firmware after 1.14 Fix from $1,9502022-01-14 HIGH 7.5 CVE-2021-20613 Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and F… Fx3u Enet Firmware after 1.16 Fix from $1,9502022-01-14 HIGH 7.5 CVE-2021-20608 Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthen… Gx Works2 after 1.606g Fix from $1,9502021-12-17 MEDIUM 5.5 CVE-2021-20606 Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and… Ezsocket after 5.4 Fix from $1,6002021-12-17 MEDIUM 5.5 CVE-2021-20607 Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and … Ezsocket after 5.4 Fix from $1,6002021-12-17 HIGH 7.5 CVE-2021-20601 Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model … Gt Softgot2000 Mitigation only Fix from $1,9502021-11-23 HIGH 7.5 CVE-2018-16060EPSS 20% Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a dir… Smartrtu Firmware No fix yet Fix from $1,9502021-10-15