MELSEC iQ-R Series R04CPU vulnerabilities

4 known vulnerabilities in MELSEC iQ-R Series R04CPU from Mitsubishi Electric. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  MELSEC iQ-F Series FX5U-32MT/ES: Buffer Copy without Checking Size of Input

  CVE-2023-1424May 24, 2023Mitsubishi ElectricEPSS 3.44%

  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS

• 7.5 High severity

  MELSEC iQ-F Series FX5U-32MT/ES: Insufficiently Protected Credentials

  CVE-2023-0457Mar 3, 2023Mitsubishi ElectricEPSS 1.17%

  Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and

• 9.1 Critical severity

  MELSEC iQ-F Series FX5U-32MT/ES: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

  CVE-2022-40267Jan 20, 2023Mitsubishi ElectricEPSS 1.24%

  Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric

• 7.5 High severity

  MELSEC iQ-R Series R00CPU: Improper Resource Shutdown or Release

  CVE-2022-33324Dec 23, 2022Mitsubishi ElectricEPSS 1.81%

  Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior