Mitsubishielectric FX3U-Enet-L Firmware vulnerabilities

5 CVEs affecting Mitsubishielectric FX3U-Enet-L Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4562, published 2023-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20613, published 2022-01-14. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior…
CVE-2021-20612, published 2022-01-14. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version…
CVE-2020-16226, published 2020-10-05. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CVE-2021-20596, published 2021-07-22. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote…
CVE-2023-4562, published 2023-10-13. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write…