Mitsubishielectric FX5UJ-40mt/ess Firmware vulnerabilities

11 CVEs affecting Mitsubishielectric FX5UJ-40mt/ess Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4699, published 2023-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-25157, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 2.4% chance of exploitation in the next 30 days. Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all…
CVE-2020-16226, published 2020-10-05. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CVE-2022-25159, published 2022-04-01. High severity, CVSS 8.1. EPSS: 2.2% chance of exploitation in the next 30 days. Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi…
CVE-2022-25155, published 2022-04-01. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all…
CVE-2022-25158, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi…
CVE-2022-25156, published 2022-04-01. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R…
CVE-2022-40267, published 2023-01-20. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number…
CVE-2023-0457, published 2023-03-03. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker…
CVE-2022-25160, published 2022-04-01. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi…
CVE-2023-4625, published 2023-11-06. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated…

Latest

CVE-2023-4699, published 2023-11-06. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series,…