Mitsubishielectric FX5UJ Firmware vulnerabilities

7 CVEs affecting Mitsubishielectric FX5UJ Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-25160, published 2022-04-01.

More from Mitsubishielectric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-25157, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 2.4% chance of exploitation in the next 30 days. Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all…
• CVE-2022-25159, published 2022-04-01. High severity, CVSS 8.1. EPSS: 2.2% chance of exploitation in the next 30 days. Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi…
• CVE-2022-25155, published 2022-04-01. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all…
• CVE-2022-25158, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi…
• CVE-2020-5527, published 2020-03-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions),…
• CVE-2022-25156, published 2022-04-01. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R…
• CVE-2022-25160, published 2022-04-01. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi…