Mitsubishielectric r08sfcpu Firmware vulnerabilities

8 CVEs affecting Mitsubishielectric r08sfcpu Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-6815, published 2024-02-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5668, published 2020-11-20. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier,…
CVE-2021-20594, published 2021-08-06. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and…
CVE-2021-20597, published 2021-08-06. Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days. Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R…
CVE-2020-16850, published 2020-11-30. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack…
CVE-2021-20598, published 2021-08-06. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote…
CVE-2021-20591, published 2021-06-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all…
CVE-2021-20599, published 2021-10-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and…
CVE-2023-6815, published 2024-02-13. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU…