Mitsubishi Electric

Products

ProductCVEsExploitedLatest
MC Works6410–Jul 20, 2022
ICONICS Suite7–Jul 20, 2022
GENESIS647–Jul 20, 2022
MC Works324–Jul 16, 2020
MT Works23–May 19, 2022
FR Configurator23–May 19, 2022
MX Component3–May 19, 2022
RT ToolBox33–May 19, 2022
MELSOFT Navigator3–May 19, 2022
GX Works33–May 19, 2022
MI Configurator3–May 19, 2022
CW Configurator3–May 19, 2022
GX Works23–May 19, 2022
MR Configurator23–May 19, 2022
Network Interface Board MNETH Utility2–May 19, 2022
PX Developer2–May 19, 2022
GT SoftGOT1000 Version32–May 19, 2022
GX LogViewer2–May 19, 2022
MELFA-Works2–May 19, 2022
Motorizer2–May 19, 2022
MELSOFT iQ AppPortal2–Feb 11, 2022
GENESIS322–Jul 20, 2022
GT Designer3 Version1 (GOT2000)2–May 19, 2022
GT SoftGOT2000 Version12–May 19, 2022
Network Interface Board CC IE Field Utility2–May 19, 2022
RT ToolBox22–May 19, 2022
CPU Module Logging Configuration Tool2–May 19, 2022
Network Interface Board CC IE Control Utility2–May 19, 2022
Network Interface Board CC-Link Ver.2 Utility2–May 19, 2022
Data Transfer2–May 19, 2022
EZSocket2–May 19, 2022
MELSEC WinCPU Setting Utility2–May 19, 2022
Setting/Monitoring tools for the C Controller module2–May 19, 2022
M_CommDTM-IO-Link2–May 19, 2022
QJ71MT911–Oct 5, 2020
FR-A8NCG1–Oct 5, 2020
RD78Gn(n=4,8,16,32,64)1–Oct 5, 2020
GS Series1–Oct 5, 2020
MTConnect Data Collector1–Feb 11, 2022
GX Developer1–Feb 11, 2022
CC-Link IE TSN Data Collector1–Feb 11, 2022
CC-Link IE Control Network Data Collector1–Feb 11, 2022
Conveyor Tracking Application1–Oct 5, 2020
MR-JE-C1–Oct 5, 2020
Motion Control Setting1–Feb 11, 2022
CC-Link IE Field Network Data Collector1–Feb 11, 2022
D55UP12-V1–Oct 5, 2020
FR-E800-EPA Series1–Oct 5, 2020
NZ2FT-MT1–Oct 5, 2020
MELSOFT FieldDeviceConfigurator1–May 19, 2022
M_CommDTM-HART1–May 19, 2022
C Controller Interface Module Utility1–Feb 11, 2022
FX5U(C)-**M*/**1–Oct 5, 2020
RJ71EN711–Oct 5, 2020
QnUDEHCPU(n=04/06/10/13/20/26/50/100)1–Oct 5, 2020
MH11 SettingTool Version21–May 19, 2022
SLMP Data Collector1–Feb 11, 2022
RD78GHW1–Oct 5, 2020
FX5UJ-**M*/**1–Oct 5, 2020
MX MESInterface1–Feb 11, 2022
FX5UC-32M*/**-TS1–Oct 5, 2020
FX5-ENET1–Oct 5, 2020
R12CCPU-V1–Oct 5, 2020
MELSOFT Complete Clean Up Tool1–Feb 11, 2022
IU1-1M20-D1–Oct 5, 2020
RnENCPU(n=04/08/16/32/120)1–Oct 5, 2020
GT Designer3 Version1 (GOT1000)1–Feb 11, 2022
GOT2000 Series GT25 model1–Nov 24, 2022
GT25-J71GN13-T21–Oct 5, 2020
FX3U-ENET1–Oct 5, 2020
FX3U-ENET-P5021–Oct 5, 2020
GT Designer2 Classic1–Feb 11, 2022
QnUDPVCPU(n=04/06/13/2)1–Oct 5, 2020
QJ71WS961–Oct 5, 2020
RD78GHV1–Oct 5, 2020
NZ2FT-EIP1–Oct 5, 2020
FX3U-ENET-L1–Oct 5, 2020
QJ71MES961–Oct 5, 2020
GOT1000 Series GT14 Model1–Oct 5, 2020
GOT2000 Series GT27 model1–Nov 24, 2022
FR-A800-E Series1–Oct 5, 2020
MX Sheet1–Feb 11, 2022
LE7-40GU-L1–Oct 5, 2020
NZ2GACP620-601–Oct 5, 2020
RnSFCPU (n=08/16/32/120)1–Oct 5, 2020
MR-J4-TM1–Oct 5, 2020
RnCPU(n=00/01/02)1–Oct 5, 2020
RnPSFCPU(n=08/16/32/120)1–Oct 5, 2020
NZ2GACP620-3001–Oct 5, 2020
L26CPU-(P)BT1–Oct 5, 2020
MX MESInterface-R1–Feb 11, 2022
LnCPU(-P)(n=02/06/26)1–Oct 5, 2020
QnUDVCPU(n=03/04/06/13/26)1–Oct 5, 2020
LJ71E71-1001–Oct 5, 2020
FR Configurator SW31–Feb 11, 2022
MELSOFT EM Software Development Kit (EM Configurator)1–May 19, 2022
GOT2000 Series GT21 Model1–Oct 5, 2020
FR-F800-E Series1–Oct 5, 2020
FR-E800-EPB Series1–Oct 5, 2020
GOT2000 Series GT23 model1–Nov 24, 2022
RJ71GN11-T21–Oct 5, 2020
RnPCPU(n=08/16/32/120)1–Oct 5, 2020
MELSOFT EM Software Development Kit1–Feb 11, 2022
RnCPU(n=04/08/16/32/120)1–Oct 5, 2020
FX5-ENET/IP1–Oct 5, 2020
FX3GE-**M*/**1–Oct 5, 2020
Q03UDECPU1–Oct 5, 2020
FX5-CCLGN-MS1–Oct 5, 2020
FX3U-ENET-ADP1–Oct 5, 2020
RD55UP06-V,1–Oct 5, 2020
Q06CCPU-V1–Oct 5, 2020
Q24DHCCPU-V1–Oct 5, 2020
QJ71E71-1001–Oct 5, 2020
Position Board utility 21–Feb 11, 2022
MELSEC iQ-R Series Motion Module1–Feb 11, 2022
Q24DHCCPU-VG1–Oct 5, 2020

Exploited and recent CVEs

  • CVE-2022-40266 Medium 5.3 Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series 0.9%
  • CVE-2022-40266 Medium 5.3 Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series 0.9%
  • CVE-2022-40266 Medium 5.3 Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series 0.9%
  • CVE-2022-33319 High 8.2 Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICON 1.7%
  • CVE-2022-33319 High 8.2 Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICON 1.7%
  • CVE-2022-33319 High 8.2 Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICON 1.7%
  • CVE-2022-33319 High 8.2 Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICON 1.7%
  • CVE-2022-33318 Critical 9.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 50.1%
  • CVE-2022-33318 Critical 9.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 50.1%
  • CVE-2022-33318 Critical 9.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 50.1%
  • CVE-2022-33318 Critical 9.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 50.1%
  • CVE-2022-33320 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.5%
  • CVE-2022-33320 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.5%
  • CVE-2022-33320 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.5%
  • CVE-2022-33315 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.3%
  • CVE-2022-33315 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.3%
  • CVE-2022-33315 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.3%
  • CVE-2022-33317 High 7.8 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.9 0.3%
  • CVE-2022-33317 High 7.8 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.9 0.3%
  • CVE-2022-33317 High 7.8 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.9 0.3%
  • CVE-2022-33316 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.3%
  • CVE-2022-33316 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.3%
  • CVE-2022-33316 High 7.8 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubish 0.3%
  • CVE-2022-29834 High 7.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions G 1.7%
  • CVE-2022-29834 High 7.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions G 1.7%
  • CVE-2020-14496 High 8.3 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues 0.9%
  • CVE-2020-14496 High 8.3 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues 0.9%
  • CVE-2020-14496 High 8.3 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues 0.9%
  • CVE-2020-14496 High 8.3 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues 0.9%
  • CVE-2020-14496 High 8.3 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues 0.9%