Mitsubishi vulnerabilities
We track 9 vulnerabilities in Mitsubishi products across 52 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2024.
Latest Mitsubishi vulnerabilities
- 8.8 High severity
MELIPC Series MI5122-VW: Incorrect Default Permissions
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a res
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Incorrect Pointer Scaling
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Incorrect Pointer Scaling
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target produc
- 7.5 High severity
MELSEC iQ-R Series R00CPU: Improper Resource Shutdown or Release
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior
- 7.5 High severity
Air Conditioning System G-150AD; Air…: Use of a Broken or Risky Cryptographic Algorithm
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD
- 9.8 Critical severity
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100…
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electri