Mitsubishielectric RJ71EN71 Firmware vulnerabilities

3 CVEs affecting Mitsubishielectric RJ71EN71 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40265, published 2022-11-30.

More from Mitsubishielectric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-5668, published 2020-11-20. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier,…
• CVE-2020-16226, published 2020-10-05. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
• CVE-2022-40265, published 2022-11-30. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series…