Most severe vulnerabilities for "mitsubishi electric q04udpvcpu"

Where

Sort:

Mitsubishielectric Q03udvcpu FirmwareMitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion

Risk 43

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.

1 / 2

Source: NVD

Remedy

Mitsubishi Electric has produced a new version of the firmware. Additional information about this vulnerability or Mitsubishi Electric's compensating control is available by contacting a local Mitsubishi Electric representative, which can be found at the following location: https://us.mitsubishielectric.com/fa/en/about-us/distributors Mitsubishi Electric strongly recommends users should operate the affected device behind a firewall.

First published (updated )

CVE-2019-6535

Mitsubishi Electric MELSEC iQ-F FX5U(C) CPU modules: All models, all versions1 vulnerability

Advisory

ICSA-23-061-01

Information Disclosure Vulnerability in MELSEC Series

Risk 44

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

First published (updated )

CVE-2023-0457

: Mitsubishi Electric QJ71MES96: all versionsICSA-20-245-01

Advisory

ICSA-20-245-01

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending