Vendor
Mitsubishi Electric
22 known vulnerabilities in products by Mitsubishi Electric, 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-33318 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-12007 | Mitsubishi Electric MC Works64: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-12013 | Mitsubishi Electric MC Works64: Code Injection | 9.1 | |
| Critical | CVE-2020-16226 | Mitsubishi Electric Multiple Products | 9.8 | |
| High | CVE-2019-6535 | Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion | 7.5 | |
| High | CVE-2020-12009 | Mitsubishi Electric MC Works64: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2019-10977 | Mitsubishi Electric MELSEC-Q series Ethernet module: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2020-14523 | Mitsubishi Electric Factory Automation Products Path Traversal | 8.3 | |
| Critical | CVE-2022-33319 | Mitsubishi Electric GENESIS64: Out-of-bounds Read | 8.2 | |
| High | CVE-2020-12015 | Mitsubishi Electric MC Works64: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2022-29834 | Mitsubishi Electric GENESIS64: Path Traversal | 7.5 | |
| Critical | CVE-2020-14521 | Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element | 8.3 | |
| Critical | CVE-2020-14496 | Mitsubishi Electric CPU Module Logging Configuration Tool: Permission Issues | 8.3 | |
| Medium | CVE-2019-10976 | Mitsubishi Electric FR Configurator2: Improper Restriction of XML External Entity Reference | 5.5 | |
| Medium | CVE-2022-40266 | Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series | 5.3 | |
| Medium | CVE-2019-10972 | Mitsubishi Electric FR Configurator2: Uncontrolled Resource Consumption | 5.5 | |
| Not rated | CVE-2015-3938 | Mitsubishi Electric Melsec Fx3g: Denial of Service | — | |
| High | CVE-2022-33320 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 7.8 | |
| Not rated | CVE-2008-1546 | Mitsubishi Electric Gb: Denial of Service | — | |
| High | CVE-2022-33315 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2022-33316 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2022-33317 | Mitsubishi Electric GENESIS64: Inclusion of Functionality from Untrusted Control Sphere | 7.8 |
Products
| Mc Works64 | 10 | 0 |
| Genesis64 | 7 | 0 |
| Iconics Suite | 7 | 0 |
| Mc Works32 | 4 | 0 |
| Cw Configurator | 3 | 0 |
| Fr Configurator2 | 3 | 0 |
| Gx Works2 | 3 | 0 |
| Gx Works3 | 3 | 0 |
| Melsoft Navigator | 3 | 0 |
| Mr Configurator2 | 3 | 0 |
| Mt Works2 | 3 | 0 |
| Mx Component | 3 | 0 |
| Rt Toolbox3 | 3 | 0 |