https://vulnogram.org/ Most recent CVEs assigned by Mitsubishi Electric Corporation (mitsubishi). https://vulnogram.org/seaview/icons/mitsubishi.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-16438 https://vulnogram.org/CVE-2026-16438 Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and… Critical Thu, 15 Oct 2026 08:31:41 GMT https://vulnogram.org/CVE-2026-16437 https://vulnogram.org/CVE-2026-16437 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior,… High Thu, 15 Oct 2026 08:30:39 GMT https://vulnogram.org/CVE-2026-16436 https://vulnogram.org/CVE-2026-16436 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior,… Critical Network Exploitable Thu, 15 Oct 2026 08:29:44 GMT https://vulnogram.org/CVE-2026-15688 https://vulnogram.org/CVE-2026-15688 Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product… Critical Thu, 17 Sep 2026 08:15:27 GMT https://vulnogram.org/CVE-2026-13584 https://vulnogram.org/CVE-2026-13584 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motio… High Thu, 30 Jul 2026 06:44:46 GMT https://vulnogram.org/CVE-2026-8806 https://vulnogram.org/CVE-2026-8806 Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sen… High Network Exploitable Fri, 19 Jun 2026 02:31:04 GMT https://vulnogram.org/CVE-2026-8805 https://vulnogram.org/CVE-2026-8805 Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition in th… High Network Exploitable Fri, 19 Jun 2026 02:26:57 GMT https://vulnogram.org/CVE-2026-5667 https://vulnogram.org/CVE-2026-5667 Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Packaged Air Conditioners… High Wed, 17 Jun 2026 10:53:53 GMT https://vulnogram.org/CVE-2025-14816 https://vulnogram.org/CVE-2025-14816 Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsu… Critical Wed, 08 Apr 2026 13:23:41 GMT https://vulnogram.org/CVE-2025-14815 https://vulnogram.org/CVE-2025-14815 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi E… Critical Wed, 08 Apr 2026 13:15:30 GMT https://vulnogram.org/CVE-2025-2399 https://vulnogram.org/CVE-2025-2399 Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V and M80VW, M800 Series M800W and M800S, M80 Series M80 and M80W, E80 Series E80, C80 Series… Medium Network Exploitable Tue, 10 Mar 2026 04:40:00 GMT https://vulnogram.org/CVE-2026-1876 https://vulnogram.org/CVE-2026-1876 Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by co… High Network Exploitable Tue, 03 Mar 2026 07:03:13 GMT https://vulnogram.org/CVE-2026-1875 https://vulnogram.org/CVE-2026-1875 Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the product… High Network Exploitable Tue, 03 Mar 2026 06:54:20 GMT https://vulnogram.org/CVE-2026-1874 https://vulnogram.org/CVE-2026-1874 Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/… High Network Exploitable Tue, 03 Mar 2026 06:46:21 GMT https://vulnogram.org/CVE-2025-15080 https://vulnogram.org/CVE-2025-15080 Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected p… High Network Exploitable Thu, 05 Feb 2026 05:16:53 GMT https://vulnogram.org/CVE-2025-10314 https://vulnogram.org/CVE-2025-10314 Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code with system privileges by replacing service executable files (EXE) or D… High Thu, 05 Feb 2026 03:07:55 GMT https://vulnogram.org/CVE-2025-11774 https://vulnogram.org/CVE-2025-11774 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior… High Fri, 19 Dec 2025 00:22:03 GMT https://vulnogram.org/CVE-2025-11009 https://vulnogram.org/CVE-2025-11009 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaint… Medium Wed, 17 Dec 2025 00:55:58 GMT https://vulnogram.org/CVE-2025-3784 https://vulnogram.org/CVE-2025-3784 Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by… Medium Thu, 27 Nov 2025 04:28:17 GMT https://vulnogram.org/CVE-2025-10089 https://vulnogram.org/CVE-2025-10089 Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application (IR) all versions, MILCO.S Easy Setting Application (IR) all version… High Tue, 18 Nov 2025 07:39:05 GMT https://vulnogram.org/CVE-2025-10259 https://vulnogram.org/CVE-2025-10259 Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attacker to disconnect the connection by sending specially crafted TCP pac… Medium Network Exploitable Thu, 06 Nov 2025 07:12:24 GMT https://vulnogram.org/CVE-2025-8531 https://vulnogram.org/CVE-2025-8531 Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with the first 5 digits of… Medium Network Exploitable Fri, 19 Sep 2025 09:30:21 GMT https://vulnogram.org/CVE-2025-7731 https://vulnogram.org/CVE-2025-7731 Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and… High Network Exploitable Mon, 01 Sep 2025 03:57:49 GMT https://vulnogram.org/CVE-2025-7405 https://vulnogram.org/CVE-2025-7405 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the progr… High Network Exploitable Mon, 01 Sep 2025 03:54:47 GMT https://vulnogram.org/CVE-2025-5514 https://vulnogram.org/CVE-2025-5514 Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and… Medium Network Exploitable Mon, 25 Aug 2025 05:55:32 GMT https://vulnogram.org/CVE-2025-7376 https://vulnogram.org/CVE-2025-7376 Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior,… Medium Wed, 06 Aug 2025 06:28:41 GMT https://vulnogram.org/CVE-2025-5241 https://vulnogram.org/CVE-2025-5241 Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrec… Medium Network Exploitable Fri, 11 Jul 2025 00:16:43 GMT https://vulnogram.org/CVE-2025-5023 https://vulnogram.org/CVE-2025-5023 Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all versions allows an attacker within the Wi-Fi communication range between the units of t… High Unsupported When Assigned Thu, 10 Jul 2025 08:34:13 GMT https://vulnogram.org/CVE-2025-5022 https://vulnogram.org/CVE-2025-5022 Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all versions allows an attacker within the Wi-Fi communication range between the units of the… Medium Unsupported When Assigned Thu, 10 Jul 2025 08:33:47 GMT https://vulnogram.org/CVE-2025-3699 https://vulnogram.org/CVE-2025-3699 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A al… Critical Network Exploitable Thu, 26 Jun 2025 22:40:37 GMT https://vulnogram.org/CVE-2025-3755 https://vulnogram.org/CVE-2025-3755 Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Ser… Critical Network Exploitable Thu, 29 May 2025 04:47:52 GMT https://vulnogram.org/CVE-2025-0921 https://vulnogram.org/CVE-2025-0921 Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and pri… Medium Thu, 15 May 2025 22:36:37 GMT https://vulnogram.org/CVE-2025-3511 https://vulnogram.org/CVE-2025-3511 Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA… High Network Exploitable Fri, 25 Apr 2025 05:14:43 GMT https://vulnogram.org/CVE-2024-4230 https://vulnogram.org/CVE-2024-4230 External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary maliciou… High Thu, 19 Dec 2024 07:23:38 GMT https://vulnogram.org/CVE-2024-4229 https://vulnogram.org/CVE-2024-4229 Incorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code,… High Thu, 19 Dec 2024 07:20:54 GMT https://vulnogram.org/CVE-2024-9852 https://vulnogram.org/CVE-2024-9852 Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Elect… High Thu, 28 Nov 2024 22:20:28 GMT https://vulnogram.org/CVE-2024-8300 https://vulnogram.org/CVE-2024-8300 Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICO… High Thu, 28 Nov 2024 22:18:28 GMT https://vulnogram.org/CVE-2024-8299 https://vulnogram.org/CVE-2024-8299 Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Elect… High Thu, 28 Nov 2024 22:16:31 GMT https://vulnogram.org/CVE-2024-8403 https://vulnogram.org/CVE-2024-8403 Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 to 1.200 and FX5-ENET/IP versions 1.100 to 1.104 allows a remote attacker to cause a Denial of Service conditio… High Network Exploitable Tue, 19 Nov 2024 05:57:17 GMT https://vulnogram.org/CVE-2024-7587 https://vulnogram.org/CVE-2024-7587 Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubis… High Tue, 22 Oct 2024 22:19:20 GMT https://vulnogram.org/CVE-2024-7316 https://vulnogram.org/CVE-2024-7316 Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683… Medium Network Exploitable Thu, 17 Oct 2024 21:52:22 GMT https://vulnogram.org/CVE-2024-3904 https://vulnogram.org/CVE-2024-3904 Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder… High Thu, 04 Jul 2024 09:11:22 GMT https://vulnogram.org/CVE-2024-1574 https://vulnogram.org/CVE-2024-1574 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsu… Medium Thu, 04 Jul 2024 09:02:35 GMT https://vulnogram.org/CVE-2024-1573 https://vulnogram.org/CVE-2024-1573 Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian… Medium Network Exploitable Thu, 04 Jul 2024 08:59:44 GMT https://vulnogram.org/CVE-2024-1182 https://vulnogram.org/CVE-2024-1182 Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Elect… High Thu, 04 Jul 2024 08:53:41 GMT https://vulnogram.org/CVE-2024-1917 https://vulnogram.org/CVE-2024-1917 Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted pack… Critical Network Exploitable Fri, 15 Mar 2024 00:02:39 GMT https://vulnogram.org/CVE-2024-1916 https://vulnogram.org/CVE-2024-1916 Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted pack… Critical Network Exploitable Fri, 15 Mar 2024 00:01:39 GMT https://vulnogram.org/CVE-2024-1915 https://vulnogram.org/CVE-2024-1915 Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. Critical Network Exploitable Fri, 15 Mar 2024 00:00:46 GMT https://vulnogram.org/CVE-2024-0803 https://vulnogram.org/CVE-2024-0803 Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted pack… Critical Network Exploitable Thu, 14 Mar 2024 23:59:20 GMT https://vulnogram.org/CVE-2024-0802 https://vulnogram.org/CVE-2024-0802 Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a tar… Critical Network Exploitable Thu, 14 Mar 2024 23:57:07 GMT