Mitsubishielectric QJ71E71-100 Firmware vulnerabilities

4 CVEs affecting Mitsubishielectric QJ71E71-100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16226, published 2020-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10977, published 2019-05-23. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to…
CVE-2016-8368, published 2017-02-13. High severity, CVSS 8.6. EPSS: 2.6% chance of exploitation in the next 30 days. An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected…
CVE-2020-16226, published 2020-10-05. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CVE-2016-8370, published 2017-02-13. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly…