Mitsubishielectric r32cpu Firmware vulnerabilities

5 CVEs affecting Mitsubishielectric r32cpu Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40267, published 2023-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5668, published 2020-11-20. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier,…
CVE-2020-16850, published 2020-11-30. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack…
CVE-2021-20591, published 2021-06-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all…
CVE-2020-5527, published 2020-03-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions),…
CVE-2022-40267, published 2023-01-20. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number…