mitsubishielectric vulnerabilities

Recent CVEs affecting mitsubishielectric products. 33 tracked.

mitsubishielectric has 33 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 16. Most recent: 2026-03-03. Highest priority: CVE-2023-6943 (score 60/100).

CVE-2026-1876 HIGH 7.5 MITIGATE Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-
CVE-2026-1875 HIGH 7.5 UPGRADE Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-
CVE-2026-1874 HIGH 7.5 UPGRADE UPGRADE Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Seri
CVE-2024-26314 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privi
CVE-2024-25088 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges a
CVE-2024-25087 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windo
CVE-2024-25086 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges a
CVE-2024-22106 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges,
CVE-2024-22105 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windo
CVE-2024-22104 MEDIUM 5.5 UPGRADE MITIGATE Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows b
CVE-2024-22103 MEDIUM 5.5 UPGRADE MITIGATE Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows b
CVE-2024-22102 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windo
CVE-2023-6943 CRITICAL 9.8 DOWNGRADE MITIGATE Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi
CVE-2023-6942 HIGH 7.5 DOWNGRADE MITIGATE Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket version
CVE-2023-6815 MEDIUM 6.5 MITIGATE MITIGATE Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU
CVE-2023-6374 MEDIUM 5.9 MITIGATE Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-
CVE-2023-5275 LOW 2.5 MITIGATE Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a deni
CVE-2023-5274 LOW 2.5 MITIGATE Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a deni
CVE-2023-5247 HIGH 7.8 MITIGATE MITIGATE Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Ele
CVE-2023-51778 MEDIUM 5.5 UPGRADE MITIGATE Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows b
CVE-2023-51777 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windo
CVE-2023-51776 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges a
CVE-2023-4699 CRITICAL 10.0 MITIGATE MITIGATE Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series
CVE-2023-4625 MEDIUM 5.3 MITIGATE MITIGATE Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MEL
CVE-2023-4562 CRITICAL 9.1 MITIGATE MITIGATE Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a
CVE-2023-4088 CRITICAL 9.3 MITIGATE Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering softwar
CVE-2023-3373 MEDIUM 5.9 UPGRADE UPGRADE Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series G
CVE-2023-3346 CRITICAL 9.8 MITIGATE MITIGATE Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series a
CVE-2023-2063 MEDIUM 6.3 MITIGATE MITIGATE Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporati
CVE-2023-2062 MEDIUM 6.2 MITIGATE MITIGATE Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tool
CVE-2023-2061 MEDIUM 6.2 MITIGATE MITIGATE Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series
CVE-2023-2060 HIGH 7.5 MITIGATE MITIGATE Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series
CVE-2023-0525 HIGH 7.5 UPGRADE UPGRADE Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions

FAQ

How do I fix mitsubishielectric vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mitsubishielectric being exploited right now?

None of the tracked mitsubishielectric CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mitsubishielectric CVE should I patch first?

CVE-2023-6943 currently ranks highest (60/100): Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi.

Products

RSS feed for mitsubishielectric · ← Back to latest CVEs