PatchTheCVEmitsubishi vulnerabilities
Recent CVEs affecting mitsubishi products. 9 tracked.
mitsubishi has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2022-12-23. Highest priority: CVE-2022-25163 (score 60/100).
- CVE-2022-33324 HIGH 7.5 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/
- CVE-2022-25163 CRITICAL 9.8 UPGRADE UPGRADE Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of s
- CVE-2022-24296 HIGH 7.5 UPGRADE UPGRADE Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver
- CVE-2021-20611 HIGH 7.5 UPGRADE UPGRADE Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Se
- CVE-2021-20610 HIGH 7.5 UPGRADE UPGRADE Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R0
- CVE-2021-20609 HIGH 7.5 UPGRADE UPGRADE Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC
- CVE-2021-20595 HIGH 8.2 UPGRADE UPGRADE Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning Sy
- CVE-2021-20593 HIGH 7.1 UPGRADE UPGRADE Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralize
- CVE-2021-20589 HIGH 7.5 UPGRADE UPGRADE Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver vers
FAQ
How do I fix mitsubishi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mitsubishi being exploited right now?
None of the tracked mitsubishi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mitsubishi CVE should I patch first?
CVE-2022-25163 currently ranks highest (60/100): Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of s.
Products
- ae-200a firmware
- ae-200e firmware
- ae-200j firmware
- ae-50a firmware
- ae-50e firmware
- ae-50j firmware
- ag-150a-a firmware
- ag-150a-j firmware
- g-50a firmware
- gb-50a firmware
- gb-50ada-a firmware
- gb-50ada-j firmware
- gs21 firmware
- gt softgot2000 firmware
- gt21 firmware
- gt23 firmware
- gt25 firmware
- gt27 firmware
- melsec iq-r r00 cpu firmware
- melsec iq-r r01 cpu firmware
- melsec iq-r r02 cpu firmware
- melsec iq-r r04 cpu firmware
- melsec iq-r r08 cpu firmware
- melsec iq-r r120 cpu firmware
- melsec iq-r r16 cpu firmware
- melsec iq-r rd81mes96n firmware
- melsec lj71e71-100 firmware
- melsec qj71e71-100 firmware