mitsubishielectric Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mitsubishielectric/ Sun, 26 Feb 2023 06:46:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png mitsubishielectric Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mitsubishielectric/ 32 32 CVE-2018-16060 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16060/ Sun, 26 Feb 2023 06:46:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16060/ Mitsubishi Electric SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.

The post CVE-2018-16060 appeared first on CVE Vulnerability.

]]> Mitsubishi Electric SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.

The post CVE-2018-16060 appeared first on CVE Vulnerability.

]]> CVE-2018-16061 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16061/ Sun, 26 Feb 2023 06:46:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16061/ Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.

The post CVE-2018-16061 appeared first on CVE Vulnerability.

]]> Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.

The post CVE-2018-16061 appeared first on CVE Vulnerability.

]]> CVE-2020-5527 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5527/ Sun, 26 Feb 2023 06:42:20 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5527/ When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As […]

The post CVE-2020-5527 appeared first on CVE Vulnerability.

]]> When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.

The post CVE-2020-5527 appeared first on CVE Vulnerability.

]]> CVE-2020-16226 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16226/ Sun, 26 Feb 2023 06:38:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16226/ Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

The post CVE-2020-16226 appeared first on CVE Vulnerability.

]]> Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

The post CVE-2020-16226 appeared first on CVE Vulnerability.

]]> CVE-2019-6535 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6535/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6535/ Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash.

The post CVE-2019-6535 appeared first on CVE Vulnerability.

]]> Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash.

The post CVE-2019-6535 appeared first on CVE Vulnerability.

]]> CVE-2019-13555 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-13555/ Sun, 26 Feb 2023 06:30:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-13555/ In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the […]

The post CVE-2019-13555 appeared first on CVE Vulnerability.

]]> In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.

The post CVE-2019-13555 appeared first on CVE Vulnerability.

]]> CVE-2019-10972 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10972/ Sun, 26 Feb 2023 06:29:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10972/ Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.

The post CVE-2019-10972 appeared first on CVE Vulnerability.

]]> Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.

The post CVE-2019-10972 appeared first on CVE Vulnerability.

]]> CVE-2019-10976 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10976/ Sun, 26 Feb 2023 06:29:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10976/ Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.

The post CVE-2019-10976 appeared first on CVE Vulnerability.

]]> Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.

The post CVE-2019-10976 appeared first on CVE Vulnerability.

]]> CVE-2019-10977 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10977/ Sun, 26 Feb 2023 06:29:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10977/ In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.

The post CVE-2019-10977 appeared first on CVE Vulnerability.

]]> In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.

The post CVE-2019-10977 appeared first on CVE Vulnerability.

]]> CVE-2022-24946 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-24946/ Thu, 23 Feb 2023 05:17:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-24946/ Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions “16” and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. “24061” and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. “24061” and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits […]

The post CVE-2022-24946 appeared first on CVE Vulnerability.

]]> Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions “16” and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. “24061” and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. “24061” and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number “24051” and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number “24051” and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number “24051” and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number “24051” and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions “05” and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

The post CVE-2022-24946 appeared first on CVE Vulnerability.

]]>