Vulnerabilities > Mitsubishielectric > Q03Udecpu Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-06-15 CVE-2022-24946 Improper Locking vulnerability in Mitsubishielectric products
Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No.
network
low complexity
mitsubishielectric CWE-667
7.8
2020-10-05 CVE-2020-16226 Predictable Exact Value from Previous Values vulnerability in Mitsubishielectric products
Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
network
low complexity
mitsubishielectric CWE-342
7.5
2019-11-13 CVE-2019-13555 Resource Exhaustion vulnerability in Mitsubishielectric products
In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.
4.3
2019-02-05 CVE-2019-6535 Resource Exhaustion vulnerability in Mitsubishielectric products
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior.
network
low complexity
mitsubishielectric CWE-400
7.5