Mitsubishielectric IU1-1m20-D Firmware vulnerabilities

7 CVEs affecting Mitsubishielectric IU1-1m20-D Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16226, published 2020-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5544, published 2020-03-16. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop…
CVE-2020-5545, published 2020-03-16. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the…
CVE-2020-5547, published 2020-03-16. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to…
CVE-2020-5542, published 2020-03-16. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network…
CVE-2020-16226, published 2020-10-05. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CVE-2020-5543, published 2020-03-16. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage sessions, which allows remote attackers to stop…
CVE-2020-5546, published 2020-03-16. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware…