Browse CVEs

HIGH 7.5 CVE-2020-5655 NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Mo… Melsec Iq Rj71eip91 Firmware Mitigation only Fix from $1,9502020-11-02 CRITICAL 9.8 CVE-2020-16226 Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to re… Qj71mes96 Firmware Mitigation only Fix from $2,3002020-10-05 CRITICAL 9.8 CVE-2020-12007 A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a de… Mc Works after 10.95.208.31 Fix from $2,3002020-07-16 CRITICAL 9.1 CVE-2020-12013 A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi El… Mc Works32 after 10.95.208.31 Fix from $2,3002020-07-16 HIGH 7.5 CVE-2020-12015 A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This… Mc Works after 10.95.208.31 Fix from $1,9502020-07-16 HIGH 7.5 CVE-2020-12009 A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability… Mc Works after 10.95.208.31 Fix from $1,9502020-07-16 CRITICAL 9.8 CVE-2020-12011EPSS 29% A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This … Mc Works after 10.95.208.31 Fix from $2,3002020-07-16 CRITICAL 9.8 CVE-2020-5595 TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Mode… Coreos Mitigation only Fix from $2,3002020-07-07 CRITICAL 9.8 CVE-2020-5599 TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Mode… Coreos Mitigation only Fix from $2,3002020-07-07 HIGH 7.5 CVE-2020-5596 TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Mode… Coreos Mitigation only Fix from $1,9502020-07-07 HIGH 7.5 CVE-2020-5597 TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Mode… Coreos Mitigation only Fix from $1,9502020-07-07 HIGH 7.5 CVE-2020-5598 TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Mode… Coreos Mitigation only Fix from $1,9502020-07-07 HIGH 7.5 CVE-2020-5600 TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Mode… Coreos Mitigation only Fix from $1,9502020-07-07 HIGH 7.5 CVE-2020-5602 Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, … Cpu Module Logging Configuration Tool after 1.590q Fix from $1,9502020-06-30 HIGH 7.5 CVE-2020-5603 Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and… Cpu Module Logging Configuration Tool after 1.590q Fix from $1,9502020-06-30 CRITICAL 9.8 CVE-2020-5594 Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sen… Melsec Iq R Firmware Mitigation only Fix from $2,3002020-06-23 HIGH 7.5 CVE-2020-13238 Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over … Melsec Iq R00cpu Firmware after 39 Fix from $1,9502020-06-10 HIGH 7.5 CVE-2020-5527 When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series … Cr800 Q Firmware Mitigation only Fix from $1,9502020-03-30 CRITICAL 9.8 CVE-2020-5545 TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers … Iu1 1m20 D Firmware after 1.0.7 Fix from $2,3002020-03-16 CRITICAL 9.8 CVE-2020-5547 Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware versio… Iu1 1m20 D Firmware after 1.0.7 Fix from $2,3002020-03-16 HIGH 8.8 CVE-2020-5546 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of Mitsubis… Iu1 1m20 D Firmware after 1.0.7 Fix from $1,9502020-03-16 CRITICAL 9.8 CVE-2020-5542 Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and ea… Iu1 1m20 D Firmware after 1.0.7 Fix from $2,3002020-03-16 CRITICAL 9.8 CVE-2020-5543 TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage… Iu1 1m20 D Firmware after 1.0.7 Fix from $2,3002020-03-16 CRITICAL 9.8 CVE-2020-5544 Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version … Iu1 1m20 D Firmware after 1.0.7 Fix from $2,3002020-03-16 CRITICAL 9.8 CVE-2020-5531 Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet p… Mi5122 Vw Firmware after 21121 Fix from $2,3002020-02-17 MEDIUM 5.9 CVE-2019-13555 In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and … Q03\/04\/06\/13\/26udvcpu Firmware after 21101 Fix from $1,6002019-11-13 CRITICAL 9.8 CVE-2019-14931EPSS 58% An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote… Smartrtu Firmware after 3.0 Fix from $2,3002019-10-28 CRITICAL 9.8 CVE-2019-14926 An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow… Smartrtu Firmware after 3.0 Fix from $2,3002019-10-28 CRITICAL 9.8 CVE-2019-14929 An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext password… Smartrtu Firmware after 3.0 Fix from $2,3002019-10-28 CRITICAL 9.8 CVE-2019-14930 An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Undocumented hard-coded u… Smartrtu Firmware after 3.0 Fix from $2,3002019-10-28