# cve.now: Mitsubishi Electric Corporation

The newest entries naming Mitsubishi Electric Corporation as an affected vendor (up to 200), of 150 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-16438](https://cve.now/CVE-2026-16438.md): An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 (CVSS 9.4)
- [CVE-2026-16437](https://cve.now/CVE-2026-16437.md): An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64… (CVSS 7.1)
- [CVE-2026-16436](https://cve.now/CVE-2026-16436.md): An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64… (CVSS 9.2)
- [CVE-2026-15688](https://cve.now/CVE-2026-15688.md): Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting (CVSS 9.2)
- [CVE-2026-13584](https://cve.now/CVE-2026-13584.md): Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol (CVSS 7.1)
- [CVE-2026-8806](https://cve.now/CVE-2026-8806.md): Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module (CVSS 8.7)
- [CVE-2026-8805](https://cve.now/CVE-2026-8805.md): Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module (CVSS 8.7)
- [CVE-2026-5667](https://cve.now/CVE-2026-5667.md): Information Disclosure, Information Tampering, or Denial-of-Service (DoS) Vulnerability in Multiple Home Appliances (CVSS 7.2)
- [CVE-2025-14816](https://cve.now/CVE-2025-14816.md): Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64 (CVSS 9.3)
- [CVE-2025-14815](https://cve.now/CVE-2025-14815.md): Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64 (CVSS 9.3)
- [CVE-2025-2399](https://cve.now/CVE-2025-2399.md): Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series (CVSS 5.9)
- [CVE-2026-1876](https://cve.now/CVE-2026-1876.md): Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet module (CVSS 8.7)
- [CVE-2026-1875](https://cve.now/CVE-2026-1875.md): Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module (CVSS 8.7)
- [CVE-2026-1874](https://cve.now/CVE-2026-1874.md): Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module and Ethernet module (CVSS 8.7)
- [CVE-2025-15080](https://cve.now/CVE-2025-15080.md): Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products (CVSS 8.8)
- [CVE-2025-10314](https://cve.now/CVE-2025-10314.md): Malicious Code Execution Vulnerability in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for Windows (CVSS 8.8)
- [CVE-2025-11774](https://cve.now/CVE-2025-11774.md): Malicious Code Execution Vulnerability in the Software Keyboard Function of GENESIS64, ICONICS Suite, Mobile HMI, and MC Works64 (CVSS 8.2)
- [CVE-2025-11009](https://cve.now/CVE-2025-11009.md): Information Disclosure Vulnerability in GT Designer3 (CVSS 5.1)
- [CVE-2025-3784](https://cve.now/CVE-2025-3784.md): Information Disclosure Vulnerability in GX Works2 (CVSS 5.5)
- [CVE-2025-10089](https://cve.now/CVE-2025-10089.md): Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S (CVSS 7.7)
- [CVE-2025-10259](https://cve.now/CVE-2025-10259.md): Denial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU module (CVSS 5.3)
- [CVE-2025-8531](https://cve.now/CVE-2025-8531.md): Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q (CVSS 6.8)
- [CVE-2025-7731](https://cve.now/CVE-2025-7731.md): Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module (CVSS 7.5)
- [CVE-2025-7405](https://cve.now/CVE-2025-7405.md): Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module (CVSS 7.3)
- [CVE-2025-5514](https://cve.now/CVE-2025-5514.md): Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module (CVSS 5.3)
- [CVE-2025-7376](https://cve.now/CVE-2025-7376.md): Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS (CVSS 5.9)
- [CVE-2025-5241](https://cve.now/CVE-2025-5241.md): Denial-of-Service Vulnerability in MELSEC iQ-F Series (CVSS 5.3)
- [CVE-2025-5023](https://cve.now/CVE-2025-5023.md): Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versi (CVSS 7.1)
- [CVE-2025-5022](https://cve.now/CVE-2025-5022.md): Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions (CVSS 6.5)
- [CVE-2025-3699](https://cve.now/CVE-2025-3699.md): Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A (CVSS 9.8)
- [CVE-2025-3755](https://cve.now/CVE-2025-3755.md): Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module (CVSS 9.1)
- [CVE-2025-0921](https://cve.now/CVE-2025-0921.md): Information Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizViz (CVSS 6.5)
- [CVE-2025-3511](https://cve.now/CVE-2025-3511.md): Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Lin (CVSS 7.5)
- [CVE-2024-9852](https://cve.now/CVE-2024-9852.md): Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32 (CVSS 7.8)
- [CVE-2024-8300](https://cve.now/CVE-2024-8300.md): Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite (CVSS 7.0)
- [CVE-2024-8299](https://cve.now/CVE-2024-8299.md): Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32 (CVSS 7.8)
- [CVE-2024-8403](https://cve.now/CVE-2024-8403.md): Denial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP Module (CVSS 7.5)
- [CVE-2024-7587](https://cve.now/CVE-2024-7587.md): Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32 (CVSS 7.8)
- [CVE-2024-7316](https://cve.now/CVE-2024-7316.md): Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series (CVSS 5.9)
- [CVE-2024-3904](https://cve.now/CVE-2024-3904.md): Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions (CVSS 8.8)
- [CVE-2024-1574](https://cve.now/CVE-2024-1574.md): Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Elec (CVSS 6.7)
- [CVE-2024-1573](https://cve.now/CVE-2024-1573.md): Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97. (CVSS 5.9)
- [CVE-2024-1182](https://cve.now/CVE-2024-1182.md): Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suit (CVSS 7.0)
- [CVE-2024-1917](https://cve.now/CVE-2024-1917.md): Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a rem (CVSS 9.8)
- [CVE-2024-1916](https://cve.now/CVE-2024-1916.md): Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a rem (CVSS 9.8)
- [CVE-2024-1915](https://cve.now/CVE-2024-1915.md): Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote u (CVSS 9.8)
- [CVE-2024-0803](https://cve.now/CVE-2024-0803.md): Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a rem (CVSS 9.8)
- [CVE-2024-0802](https://cve.now/CVE-2024-0802.md): Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote u (CVSS 9.8)
- [CVE-2023-7033](https://cve.now/CVE-2023-7033.md): Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L (CVSS 5.3)
- [CVE-2023-6815](https://cve.now/CVE-2023-6815.md): Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all version (CVSS 6.5)
- [CVE-2023-6943](https://cve.now/CVE-2023-6943.md): Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket (CVSS 9.8)
- [CVE-2023-6942](https://cve.now/CVE-2023-6942.md): Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Ve (CVSS 7.5)
- [CVE-2023-6374](https://cve.now/CVE-2023-6374.md): Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers a (CVSS 5.9)
- [CVE-2023-5247](https://cve.now/CVE-2023-5247.md): Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software (CVSS 7.8)
- [CVE-2023-5275](https://cve.now/CVE-2023-5275.md): Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition (CVSS 2.5)
- [CVE-2023-5274](https://cve.now/CVE-2023-5274.md): Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition (CVSS 2.5)
- [CVE-2023-4699](https://cve.now/CVE-2023-4699.md): Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products (CVSS 10.0)
- [CVE-2023-4625](https://cve.now/CVE-2023-4625.md): Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module (CVSS 5.3)
- [CVE-2023-4562](https://cve.now/CVE-2023-4562.md): Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module (CVSS 9.1)
- [CVE-2023-4088](https://cve.now/CVE-2023-4088.md): Malicious Code Execution Vulnerability in FA Engineering Software Products (CVSS 9.3)
- [CVE-2023-3373](https://cve.now/CVE-2023-3373.md): Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 a (CVSS 5.9)
- [CVE-2023-0525](https://cve.now/CVE-2023-0525.md): Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 mod (CVSS 7.5)
- [CVE-2023-3346](https://cve.now/CVE-2023-3346.md): Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series (CVSS 9.8)
- [CVE-2023-2846](https://cve.now/CVE-2023-2846.md): Authentication Bypass Vulnerability in MELSEC-F Series main module (CVSS 7.5)
- [CVE-2023-2063](https://cve.now/CVE-2023-2063.md): Information disclosure, tampering, deletion and destruction vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules (CVSS 6.3)
- [CVE-2023-2062](https://cve.now/CVE-2023-2062.md): Information Disclosure vulnerability in EtherNet/IP Configuration tools (CVSS 6.2)
- [CVE-2023-2061](https://cve.now/CVE-2023-2061.md): Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules (CVSS 6.2)
- [CVE-2023-2060](https://cve.now/CVE-2023-2060.md): Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules (CVSS 7.5)
- [CVE-2023-1424](https://cve.now/CVE-2023-1424.md): Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module (CVSS 10.0)
- [CVE-2023-1618](https://cve.now/CVE-2023-1618.md): Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module (CVSS 7.5)
- [CVE-2023-0457](https://cve.now/CVE-2023-0457.md): Information Disclosure Vulnerability in MELSEC Series (CVSS 7.5)
- [CVE-2022-40269](https://cve.now/CVE-2022-40269.md): Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000 (CVSS 6.8)
- [CVE-2022-40268](https://cve.now/CVE-2022-40268.md): Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01. (CVSS 6.1)
- [CVE-2022-33323](https://cve.now/CVE-2022-33323.md): Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series (CVSS 7.5)
- [CVE-2022-40267](https://cve.now/CVE-2022-40267.md): Authentication Bypass Vulnerability in Web Server Function on MELSEC Series (CVSS 5.9)
- [CVE-2022-33324](https://cve.now/CVE-2022-33324.md): Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series (CVSS 7.5)
- [CVE-2022-40265](https://cve.now/CVE-2022-40265.md): Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module (CVSS 8.6)
- [CVE-2022-29833](https://cve.now/CVE-2022-29833.md): Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote un (CVSS 6.8)
- [CVE-2022-29832](https://cve.now/CVE-2022-29832.md): Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, G (CVSS 3.7)
- [CVE-2022-29831](https://cve.now/CVE-2022-29831.md): Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthe (CVSS 7.5)
- [CVE-2022-29830](https://cve.now/CVE-2022-29830.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Settin (CVSS 9.1)
- [CVE-2022-29829](https://cve.now/CVE-2022-29829.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GO (CVSS 6.8)
- [CVE-2022-29828](https://cve.now/CVE-2022-29828.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenti (CVSS 6.8)
- [CVE-2022-29827](https://cve.now/CVE-2022-29827.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenti (CVSS 6.8)
- [CVE-2022-29826](https://cve.now/CVE-2022-29826.md): Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control (CVSS 6.8)
- [CVE-2022-29825](https://cve.now/CVE-2022-29825.md): Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) ve (CVSS 5.6)
- [CVE-2022-25164](https://cve.now/CVE-2022-25164.md): Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Elec (CVSS 8.6)
- [CVE-2022-40266](https://cve.now/CVE-2022-40266.md): Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series (CVSS 5.3)
- [CVE-2022-33322](https://cve.now/CVE-2022-33322.md): Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HE (CVSS 6.1)
- [CVE-2022-33321](https://cve.now/CVE-2022-33321.md): Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Elec (CVSS 9.8)
- [CVE-2022-33319](https://cve.now/CVE-2022-33319.md): Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions G (CVSS 8.2)
- [CVE-2022-33318](https://cve.now/CVE-2022-33318.md): Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi (CVSS 9.8)
- [CVE-2022-33320](https://cve.now/CVE-2022-33320.md): Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi (CVSS 7.8)
- [CVE-2022-33315](https://cve.now/CVE-2022-33315.md): Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi (CVSS 7.8)
- [CVE-2022-33317](https://cve.now/CVE-2022-33317.md): Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubish (CVSS 7.8)
- [CVE-2022-33316](https://cve.now/CVE-2022-33316.md): Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi (CVSS 7.8)
- [CVE-2022-29834](https://cve.now/CVE-2022-29834.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 (CVSS 7.5)
- [CVE-2020-14496](https://cve.now/CVE-2020-14496.md): Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues (CVSS 8.3)
- [CVE-2020-14523](https://cve.now/CVE-2020-14523.md): Mitsubishi Electric Factory Automation Products Path Traversal (CVSS 8.3)
- [CVE-2020-14521](https://cve.now/CVE-2020-14521.md): Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element (CVSS 8.3)
- [CVE-2022-23130](https://cve.now/CVE-2022-23130.md): Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and p (CVSS 5.9)
- [CVE-2021-20611](https://cve.now/CVE-2021-20611.md): Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, (CVSS 7.5)
- [CVE-2021-20610](https://cve.now/CVE-2021-20610.md): Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series (CVSS 7.5)
- [CVE-2021-20609](https://cve.now/CVE-2021-20609.md): Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120( (CVSS 7.5)
- [CVE-2021-20599](https://cve.now/CVE-2021-20599.md): Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CP (CVSS 9.1)
- [CVE-2021-20588](https://cve.now/CVE-2021-20588.md): Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configu (CVSS 7.5)
- [CVE-2021-20587](https://cve.now/CVE-2021-20587.md): Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.11 (CVSS 7.5)
- [CVE-2020-5665](https://cve.now/CVE-2020-5665.md): Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an att (no CVSS)
- [CVE-2020-5675](https://cve.now/CVE-2020-5675.md): Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT (no CVSS)
- [CVE-2020-5668](https://cve.now/CVE-2020-5668.md): Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/ (no CVSS)
- [CVE-2020-5666](https://cve.now/CVE-2020-5666.md): Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/ (no CVSS)
- [CVE-2020-5649](https://cve.now/CVE-2020-5649.md): Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS ve (no CVSS)
- [CVE-2020-5648](https://cve.now/CVE-2020-5648.md): Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware (no CVSS)
- [CVE-2020-5647](https://cve.now/CVE-2020-5647.md): Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS vers (no CVSS)
- [CVE-2020-5646](https://cve.now/CVE-2020-5646.md): NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS ve (no CVSS)
- [CVE-2020-5645](https://cve.now/CVE-2020-5645.md): Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05 (no CVSS)
- [CVE-2020-5644](https://cve.now/CVE-2020-5644.md): Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05. (no CVSS)
- [CVE-2020-5658](https://cve.now/CVE-2020-5658.md): Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network In (no CVSS)
- [CVE-2020-5657](https://cve.now/CVE-2020-5657.md): Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware (no CVSS)
- [CVE-2020-5656](https://cve.now/CVE-2020-5656.md): Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Inter (no CVSS)
- [CVE-2020-5655](https://cve.now/CVE-2020-5655.md): NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Int (no CVSS)
- [CVE-2020-5654](https://cve.now/CVE-2020-5654.md): Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Mo (no CVSS)
- [CVE-2020-5653](https://cve.now/CVE-2020-5653.md): Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Mod (no CVSS)
- [CVE-2020-5652](https://cve.now/CVE-2020-5652.md): Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware version (no CVSS)
- [CVE-2020-16226](https://cve.now/CVE-2020-16226.md): Mitsubishi Electric Multiple Products (no CVSS)
- [CVE-2020-12007](https://cve.now/CVE-2020-12007.md): A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition du (no CVSS)
- [CVE-2020-12015](https://cve.now/CVE-2020-12015.md): A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserializat (no CVSS)
- [CVE-2020-12013](https://cve.now/CVE-2020-12013.md): A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. (no CVSS)
- [CVE-2020-12009](https://cve.now/CVE-2020-12009.md): A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vuln (no CVSS)
- [CVE-2020-5600](https://cve.now/CVE-2020-5600.md): TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, (no CVSS)
- [CVE-2020-5599](https://cve.now/CVE-2020-5599.md): TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, (no CVSS)
- [CVE-2020-5598](https://cve.now/CVE-2020-5598.md): TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, (no CVSS)
- [CVE-2020-5597](https://cve.now/CVE-2020-5597.md): TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, (no CVSS)
- [CVE-2020-5596](https://cve.now/CVE-2020-5596.md): TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, (no CVSS)
- [CVE-2020-5595](https://cve.now/CVE-2020-5595.md): TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, (no CVSS)
- [CVE-2020-5603](https://cve.now/CVE-2020-5603.md): Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. (no CVSS)
- [CVE-2020-5602](https://cve.now/CVE-2020-5602.md): Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. (no CVSS)
- [CVE-2020-5594](https://cve.now/CVE-2020-5594.md): Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmissi (no CVSS)
- [CVE-2020-5527](https://cve.now/CVE-2020-5527.md): When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC (no CVSS)
- [CVE-2020-5547](https://cve.now/CVE-2020-5547.md): Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmwa (no CVSS)
- [CVE-2020-5546](https://cve.now/CVE-2020-5546.md): Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of (no CVSS)
- [CVE-2020-5545](https://cve.now/CVE-2020-5545.md): TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote a (no CVSS)
- [CVE-2020-5544](https://cve.now/CVE-2020-5544.md): Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware (no CVSS)
- [CVE-2020-5543](https://cve.now/CVE-2020-5543.md): TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not proper (no CVSS)
- [CVE-2020-5542](https://cve.now/CVE-2020-5542.md): Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0 (no CVSS)
- [CVE-2020-5531](https://cve.now/CVE-2020-5531.md): Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User E (no CVSS)
- [CVE-2019-10972](https://cve.now/CVE-2019-10972.md): Mitsubishi Electric FR Configurator2, Version 1.16S and prior. (no CVSS)
- [CVE-2019-10976](https://cve.now/CVE-2019-10976.md): Mitsubishi Electric FR Configurator2, Version 1.16S and prior. (no CVSS)
- [CVE-2019-10977](https://cve.now/CVE-2019-10977.md): In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets (no CVSS)
- [CVE-2019-6535](https://cve.now/CVE-2019-6535.md): Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mitsubishi-electric
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.