Mitsubishielectric FX5UJ-24mr/es-A Firmware vulnerabilities

4 CVEs affecting Mitsubishielectric FX5UJ-24mr/es-A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4699, published 2023-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-40267, published 2023-01-20. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number…
CVE-2023-0457, published 2023-03-03. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker…
CVE-2023-4625, published 2023-11-06. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated…
CVE-2023-4699, published 2023-11-06. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series,…