Mitsubishi Electric 漏洞

时间轴

类型

产品

Mitsubishi Electric MELSEC iQ-R28
Mitsubishi Electric MC Works6415
Mitsubishi Electric GX Works314
Mitsubishi Electric GOT200014
Mitsubishi Electric MELSEC-Q10

修正

Official Fix13
Temporary Fix0
Workaround11
Unavailable1
Not Defined129

易受攻击性

High0
Functional1
Proof-of-Concept0
Unproven0
Not Defined153

访问向量

Not Defined0
Physical0
Local7
Adjacent8
Network139

身份验证

Not Defined0
High0
Low14
None140

用户交互

Not Defined0
Required19
None135

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤49
≤511
≤634
≤737
≤833
≤920
≤1010

CVSSv3 Temp

≤10
≤20
≤30
≤49
≤511
≤634
≤738
≤833
≤919
≤1010

VulDB

≤10
≤20
≤32
≤421
≤513
≤649
≤717
≤841
≤91
≤1010

NVD

≤10
≤20
≤30
≤40
≤53
≤64
≤76
≤840
≤94
≤1028

CNA

≤10
≤20
≤32
≤41
≤50
≤67
≤712
≤810
≤95
≤1012

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤100

零日攻击

<1k39
<2k72
<5k43
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k131
<2k17
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (194): 8 (1), 16 (1), 32 (1), 64) (1), AE-50A (1), AE-50E (1), AE-50J (1), AE-200A (1), AE-200E (1), AE-200J (1), AG-150A-A (1), AG-150A-J (1), Air Conditioning (2), Air Conditioning System (1), Air Purifier (2), BATHROOM THERMO VENTILATOR (2), C80 (1), Centralized Controller (1), D (1), DS (1), DS-TS (1), DSS (1), DSS-TS (1), EB-50GU-A (1), EB-50GU-J (1), ES (1), ES-A (1), ESS (1), EW-50A (1), EW-50E (1), EW-50J (1), EZSocket (2), Energy Measurement Unit (1), Energy Recovery Ventilator (2), FR Configurator2 (4), FX3U-ENET-P502 (1), Factory Automation (1), Factory Automation Engineering (2), FrameWorX (5), G-150AD (1), GB (1), GB-50AD (1), GB-50ADA-A (1), GB-50ADA-J (1), GC-ENET-COM (1), GOT2000 (14), GOT2000 Series (1), GOT SIMPLE (3), GOT SIMPLE Series (1), GOT Simple (1), GS2107-WTBD (4), GS2107-WTBD-N (3), GS2110-WTBD (4), GS2110-WTBD-N (3), GT1450-QLBDE (6), GT1450-QMBDE (6), GT1450HS-QMBDE (6), GT1455-QTBDE (6), GT1455HS-QTBDE (6), GT2103-PMBD (4), GT2104-PMBD (4), GT2104-RTBD (4), GT2107-WTBD (4), GT2107-WTSD (4), GT Designer3 (1), GT Designer3 Version1(GOT1000) (2), GT Designer3 Version1(GOT2000) (2), GT SoftGOT2000 (5), GX Works2 (7), GX Works3 (14), HEMS adapter (2), ICONICS (1), ICONICS AnalytiX (1), ICONICS GENESIS64 (10), ICONICS GenBroker64 (5), ICONICS Hyper Historian (2), ICONICS MobileHM (1), ICONICS MobileHMI (1), INEA ME-RTU (7), Induction hob (1), IoT Unit (1), LE7-40GU-L (4), LE7-40GU-L MODBUS (1), LJ71E71-100 (1), M8 (1), M8V (1), MC Works32 (5), MC Works64 (15), ME-RTU (7), MELFA F (1), MELFA FR (1), MELFA SD-SQ (1), MELIPC Series MI5000 MELSEC-Q Series C Controller Module (1), MELQIC IU1 (6), MELSEC-F (5), MELSEC-F FX3U-ENET (1), MELSEC-F FX3U-ENET-L (1), MELSEC-L (7), MELSEC-Q (10), MELSEC C Controller Module (1), MELSEC F (1), MELSEC FX (1), MELSEC FX3G PLC (1), MELSEC L (4), MELSEC Q (5), MELSEC WS Series WS0-GETH00200 (1), MELSEC iQ-F (8), MELSEC iQ-F FX5-ENET (1), MELSEC iQ-F FX5-ENET-IP (1), MELSEC iQ-F FX5S (1), MELSEC iQ-F FX5U(C) (8), MELSEC iQ-F FX5UJ (7), MELSEC iQ-F Series FX5S-30MR (1), MELSEC iQ-F Series FX5S-30MT (1), MELSEC iQ-F Series FX5S-40MR (1), MELSEC iQ-F Series FX5S-40MT (1), MELSEC iQ-F Series FX5S-60MR (1), MELSEC iQ-F Series FX5S-60MT (1), MELSEC iQ-F Series FX5S-80MR (1), MELSEC iQ-F Series FX5S-80MT (1), MELSEC iQ-F Series FX5U-32MR (1), MELSEC iQ-F Series FX5U-32MT (1), MELSEC iQ-F Series FX5U-64MR (1), MELSEC iQ-F Series FX5U-64MT (1), MELSEC iQ-F Series FX5U-80MR (1), MELSEC iQ-F Series FX5U-80MT (1), MELSEC iQ-F Series FX5UC-32MR (1), MELSEC iQ-F Series FX5UC-32MT (1), MELSEC iQ-F Series FX5UC-64MT (1), MELSEC iQ-F Series FX5UC-96MT (1), MELSEC iQ-F Series FX5UJ-24MR (1), MELSEC iQ-F Series FX5UJ-24MT (1), MELSEC iQ-F Series FX5UJ-40MR (1), MELSEC iQ-F Series FX5UJ-40MT (1), MELSEC iQ-F Series FX5UJ-60MR (1), MELSEC iQ-F Series FX5UJ-60MT (1), MELSEC iQ-L (1), MELSEC iQ-Q (1), MELSEC iQ-R (28), MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU (1), MELSEC iQ-R Series SIL2 Process CPU R16PSFCPU (1), MELSEC iQ-R Series SIL2 Process CPU R32PSFCPU (1), MELSEC iQ-R Series SIL2 Process CPU R120PSFCPU (1), MELSEC iQ-R Series Safety CPU R08SFCPU (1), MELSEC iQ-R Series Safety CPU R16SFCPU (1), MELSEC iQ-R Series Safety CPU R32SFCPU (1), MELSEC iQ-R Series Safety CPU R120SFCPU (1), MELSOFT Navigator (3), MELSOFT iQ AppPortal (1), MT Works2 (2), MX Component (2), MX OPC Server DA-UA (2), MX OPC UA Module Configurator-R (1), Mitsubishi Electric HEMS Energy Measurement Unit (1), Mitsubishi Electric HEMS control adapter (2), Motion Control Setting (1), NZ2FT-EIP (1), NZ2FT-MT (1), NZ2GACP620-60 (1), NZ2GACP620-300 (1), PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE (1), Platform Services (5), Q03 (1), Q03UDECPU (1), Q04 (1), Q06CCPU-V (1), Q24DHCCPU-V (1), Q24DHCCPU-VG (1), QJ71E71-100 (2), QJ71MES96 (1), QJ71MT91 (1), QJ71WS96 (1), QnUDEHCPU (1), R12CCPU-V (1), RD55UP06-V (1), RD55UP12-V (1), RD78GHV (1), RD78GHW (1), RD78Gn(n=4 (1), RJ71EN71 (1), RJ71GN11-T2 (1), Range hood fan (1), Refrigerator (2), Remote control with Wi-Fi Interface (2), Rice cooker (2), Smart Switch (2), TE-50A (1), TE-200A (1), TW-50A (1), Ventilating Fan (1), WS0-GETH00200 (1), Wi-Fi Interface (2), Workbench (5), smartRTU (2)

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2024-03-159.89.7Mitsubishi Electric MELSEC-Q/MELSEC-L Packet 内存损坏未知Not DefinedWorkaround0.000450.00CVE-2024-1917
2024-03-159.89.7Mitsubishi Electric MELSEC-Q/MELSEC-L Packet 内存损坏未知Not DefinedWorkaround0.000450.00CVE-2024-1916
2024-03-159.89.7Mitsubishi Electric MELSEC-Q/MELSEC-L Packet Remote Code Execution未知Not DefinedWorkaround0.000450.05CVE-2024-1915
2024-03-159.89.7Mitsubishi Electric MELSEC-Q/MELSEC-L Packet 内存损坏未知Not DefinedWorkaround0.000450.04CVE-2024-0803
2024-03-159.89.7Mitsubishi Electric MELSEC-Q/MELSEC-L Packet Remote Code Execution未知Not DefinedWorkaround0.000450.05CVE-2024-0802
2024-02-275.35.3Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT Ethernet 拒绝服务未知Not DefinedNot Defined0.000450.02CVE-2023-7033
2024-02-135.45.4Mitsubishi Electric MELSEC iQ-R Series Safety CPU R08SFCPU Packet 权限升级Chip SoftwareNot DefinedNot Defined0.000450.02CVE-2023-6815
2024-01-309.89.8Mitsubishi Electric EZSocket Remote Code Execution未知Not DefinedNot Defined0.001580.06CVE-2023-6943
2024-01-307.47.4Mitsubishi Electric EZSocket 弱身份验证未知Not DefinedNot Defined0.001030.06CVE-2023-6942
2024-01-306.36.3Mitsubishi Electric MELSEC WS Series WS0-GETH00200 弱身份验证未知Not DefinedNot Defined0.001020.03CVE-2023-6374
2023-11-308.38.3Mitsubishi Electric GX Works3 Project File 权限升级未知Not DefinedNot Defined0.000550.00CVE-2023-5247
2023-11-213.23.2Mitsubishi Electric GX Works2 Packet 拒绝服务未知Not DefinedNot Defined0.000430.00CVE-2023-5275
2023-11-213.23.2Mitsubishi Electric GX Works2 Packet 拒绝服务未知Not DefinedNot Defined0.000430.00CVE-2023-5274
2023-11-029.59.5Mitsubishi Electric MELSEC-F/MELSEC iQ-F 弱身份验证未知Not DefinedNot Defined0.001230.00CVE-2023-4699
2023-11-024.54.5Mitsubishi Electric MELSEC iQ-F Web Server 信息公开未知Not DefinedNot Defined0.001000.00CVE-2023-4625
2023-10-138.28.2Mitsubishi Electric MELSEC-F Main Module 弱身份验证未知Not DefinedNot Defined0.001100.00CVE-2023-4562
2023-09-208.58.5Mitsubishi Electric GX Works3 Incomplete Fix CVE-2020-14496 权限升级未知Not DefinedNot Defined0.000420.00CVE-2023-4088
2023-08-036.76.6Mitsubishi Electric GOT SIMPLE/GOT2000 FTP Server Remote Code Execution未知Not DefinedOfficial Fix0.001230.00CVE-2023-3373
2023-08-035.35.1Mitsubishi Electric GT SoftGOT2000 Data Transfer Security 信息公开未知Not DefinedOfficial Fix0.001010.03CVE-2023-0525
2023-07-279.89.5Mitsubishi Electric M8V/M8/C80/IoT Unit Packet 内存损坏未知Not DefinedWorkaround0.005140.00CVE-2023-3346
2023-06-298.07.9Mitsubishi Electric MELSEC-F 弱身份验证未知Not DefinedWorkaround0.001170.06CVE-2023-2846
2023-06-024.74.7Mitsubishi Electric MELSEC iQ-R 信息公开未知Not DefinedNot Defined0.000720.00CVE-2023-2062
2023-06-026.36.3Mitsubishi Electric MELSEC iQ-R FTP 弱身份验证未知Not DefinedNot Defined0.001490.00CVE-2023-2061
2023-06-025.65.6Mitsubishi Electric MELSEC iQ-R FTP 弱身份验证未知Not DefinedNot Defined0.001490.04CVE-2023-2060
2023-06-027.07.0Mitsubishi Electric MELSEC iQ-R 权限升级未知Not DefinedNot Defined0.001040.00CVE-2023-2063

129 更多条目未显示

Do you want to use VulDB in your project?

Use the official API to access entries easily!