Export limit exceeded: 425694 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-4699

Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishi Electric CNC M800/M80/E80 series and Mitsubishi Electric CNC M700V/M70V/E70 series allows a remote unauthenticated attacker to execute arbitrary commands by sending specific packets to the affected products. This could lead to disclose or tamper with information by reading or writing control programs, or cause a denial-of-service (DoS) condition on the products by resetting the memory contents of the products to factory settings or resetting the products remotely.

CVSS 3.1 · 10 Critical EPSS 1.1% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx3g-14mr\/ds Fx3g-14mr\/ds Firmware Fx3g-14mr\/es and 429 more
CVE-2023-2846

Authentication Bypass Vulnerability in MELSEC-F Series main module

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx3g-14mr\/ds Fx3g-14mr\/ds Firmware Fx3g-14mr\/es and 297 more
CVE-2023-4562

Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx3g-14 Mr\/ds Fx3g-14 Mr\/ds Firmware Fx3g-14 Mr\/es and 377 more