Mitsubishielectric FX3UC-16mt/dss-p4 Firmware vulnerabilities

3 CVEs affecting Mitsubishielectric FX3UC-16mt/dss-p4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4699, published 2023-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2846, published 2023-06-30. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword…
CVE-2023-4562, published 2023-10-13. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write…
CVE-2023-4699, published 2023-11-06. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series,…