Browse CVEs

MEDIUM 6.1 CVE-2018-16061 Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php. Smartrtu Firmware No fix yet Fix from $1,6002021-10-15 HIGH 7.5 CVE-2021-20599 Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/… R08sfcpu Firmware Mitigation only Fix from $1,9502021-10-14 MEDIUM 5.9 CVE-2021-20600 Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a r… R12ccpu V Firmware after 16 Fix from $1,6002021-10-08 CRITICAL 9.1 CVE-2021-20597 Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions … R08sfcpu Firmware Mitigation only Fix from $2,3002021-08-06 HIGH 7.5 CVE-2021-20594 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SF… R08sfcpu Firmware Mitigation only Fix from $1,9502021-08-06 MEDIUM 5.3 CVE-2021-20598 Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R0… R08sfcpu Firmware Mitigation only Fix from $1,6002021-08-06 HIGH 7.5 CVE-2021-20592 Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communicatio… Gt Softgot2000 after 1.256s Fix from $1,9502021-08-05 HIGH 7.5 CVE-2021-20596 NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502… Fx3u Enet L Firmware after 1.14 Fix from $1,9502021-07-22 HIGH 7.5 CVE-2021-20591 Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN… R00cpu Firmware Mitigation only Fix from $1,9502021-06-11 HIGH 7.5 CVE-2021-20590 Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server vers… Got2000 Gt27 Firmware after 01.40.000 Fix from $1,9502021-04-22 CRITICAL 9.8 CVE-2021-20588EPSS 7% Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration To… C Controller Module Setting And Monitoring Tool after 3.44w Fix from $2,3002021-02-19 CRITICAL 9.8 CVE-2021-20587 Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and pr… C Controller Module Setting And Monitoring Tool after 3.44w Fix from $2,3002021-02-19 HIGH 7.5 CVE-2021-20586 Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "… Rv2fr Firmware Mitigation only Fix from $1,9502021-01-29 HIGH 7.4 CVE-2020-5665 Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to … Melsec Iq F Fx5u Cpu Firmware after 1.060 Fix from $1,9502020-12-14 HIGH 7.5 CVE-2020-5675 Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD… Gt2107 Wtbd Firmware after 01.39.000 Fix from $1,9502020-12-04 HIGH 7.5 CVE-2020-16850 Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over… R00cpu Firmware after 52 Fix from $1,9502020-11-30 HIGH 7.5 CVE-2020-5668 Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) … R00cpu Firmware after 51 Fix from $1,9502020-11-20 HIGH 7.5 CVE-2020-5666EPSS 9% Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/… Melsec Iq R00 Firmware after 51 Fix from $1,9502020-11-16 CRITICAL 9.8 CVE-2020-5644 Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD"… Coreos after 05.65.00.bd Fix from $2,3002020-11-06 CRITICAL 9.8 CVE-2020-5647 Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.6… Coreos after 05.65.00.bd Fix from $2,3002020-11-06 CRITICAL 9.8 CVE-2020-5648 Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 … Coreos after 05.65.00.bd Fix from $2,3002020-11-06 HIGH 7.5 CVE-2020-5645 Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD… Coreos after 05.65.00.bd Fix from $1,9502020-11-06 HIGH 7.5 CVE-2020-5646 NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05… Coreos after 05.65.00.bd Fix from $1,9502020-11-06 HIGH 7.5 CVE-2020-5649 Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05… Coreos after 05.65.00.bd Fix from $1,9502020-11-06 HIGH 7.5 CVE-2020-5658 Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface M… Melsec Iq Rj71eip91 Firmware Mitigation only Fix from $1,9502020-11-02 MEDIUM 6.5 CVE-2020-5657 Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of MELSE… Melsec Iq Rj71eip91 Firmware Mitigation only Fix from $1,6002020-11-02 CRITICAL 9.8 CVE-2020-5653 Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First… Melsec Iq Rj71eip91 Firmware Mitigation only Fix from $2,3002020-11-02 CRITICAL 9.8 CVE-2020-5656 Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Modu… Melsec Iq Rj71eip91 Firmware Mitigation only Fix from $2,3002020-11-02 HIGH 7.5 CVE-2020-5652 Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' an… Melsec Q Q04udpvcpu Firmware Mitigation only Fix from $1,9502020-11-02 HIGH 7.5 CVE-2020-5654 Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module Firs… Melsec Iq Rj71eip91 Firmware Mitigation only Fix from $1,9502020-11-02