Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2023-0457

Information Disclosure Vulnerability in MELSEC Series

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx5-enet Fx5-enet\/ip Fx5-enet\/ip Firmware and 73 more
CVE-2023-2060

Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx5-enet\/ip Fx5-enet\/ip Firmware Rj71eip91 and 5 more
CVE-2023-2061

Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx5-enet\/ip Fx5-enet\/ip Firmware Rj71eip91 and 5 more
CVE-2023-2062

Information Disclosure vulnerability in EtherNet/IP Configuration tools

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx5-enet\/ip Fx5-enet\/ip Firmware Rj71eip91 and 5 more
CVE-2023-2063

Information disclosure, tampering, deletion and destruction vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mitsubishielectric
Products
Fx5-enet\/ip Fx5-enet\/ip Firmware Rj71eip91 and 5 more
CVE-2020-16226

Mitsubishi Electric Multiple Products

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Mitsubishielectric
Products
Conveyor Tracking Application Apr-ntr12fh Conveyor Tracking Application Apr-ntr20fh\(n\=1\,2\) Conveyor Tracking Application Apr-ntr3fh and 183 more