Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.70% | — | Mitsubishielectric R08sfcpu FirmwareMitsubishielectric R16sfcpu FirmwareMitsubishielectric R32sfcpu FirmwareMitsubishielectric R120sfcpu Firmware+4 | 13/2/2024 | 17/6/2026 | Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to… | |
| Modificada | Alta (7.5) | 1.4% | — | Mitsubishielectric R08sfcpu FirmwareMitsubishielectric R16sfcpu FirmwareMitsubishielectric R32sfcpu FirmwareMitsubishielectric R120sfcpu Firmware+4 | 14/10/2021 | 17/6/2026 | Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated… | |
| Modificada | Media (5.3) | 1.5% | — | Mitsubishielectric R08sfcpu FirmwareMitsubishielectric R16sfcpu FirmwareMitsubishielectric R32sfcpu FirmwareMitsubishielectric R120sfcpu Firmware+4 | 6/8/2021 | 17/6/2026 | Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password. | |
| Modificada | Crítica (9.1) | 2.2% | — | Mitsubishielectric R08sfcpu FirmwareMitsubishielectric R16sfcpu FirmwareMitsubishielectric R32sfcpu FirmwareMitsubishielectric R120sfcpu Firmware+4 | 6/8/2021 | 17/6/2026 | Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated… | |
| Modificada | Alta (7.5) | 2.4% | — | Mitsubishielectric R08sfcpu FirmwareMitsubishielectric R16sfcpu FirmwareMitsubishielectric R32sfcpu FirmwareMitsubishielectric R120sfcpu Firmware+4 | 6/8/2021 | 17/6/2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a… | |
| Modificada | Alta (7.5) | 1.5% | — | Mitsubishielectric R00cpu FirmwareMitsubishielectric R01cpu FirmwareMitsubishielectric R02cpu FirmwareMitsubishielectric R04cpu Firmware+16 | 11/6/2021 | 17/6/2026 | Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent… | |
| Modificada | Alta (7.5) | 2.1% | — | Mitsubishielectric R00cpu FirmwareMitsubishielectric R01cpu FirmwareMitsubishielectric R02cpu FirmwareMitsubishielectric R04cpu Firmware+15 | 30/11/2020 | 17/6/2026 | Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and… | |
| Modificada | Alta (7.5) | 4.9% | — | Mitsubishielectric R00cpu FirmwareMitsubishielectric R01cpu FirmwareMitsubishielectric R02cpu FirmwareMitsubishielectric R04cpu Firmware+24 | 20/11/2020 | 17/6/2026 | Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU… | |
| Modificada | Alta (7.5) | 3.6% | — | Mitsubishielectric Melsec Q-q04udpvcpu FirmwareMitsubishielectric Melsec Q-q06udpvcpu FirmwareMitsubishielectric Melsec Q-q13udpvcpu FirmwareMitsubishielectric Melsec Q-q26udpvcpu Firmware+47 | 2/11/2020 | 17/6/2026 | Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R… | |
| Modificada | Alta (7.5) | 3.3% | — | Mitsubishielectric Melsec Iq-r00cpu FirmwareMitsubishielectric Melsec Iq-r01cpu FirmwareMitsubishielectric Melsec Iq-r02cpu FirmwareMitsubishielectric Melsec Iq-r04cpu Firmware+17 | 10/6/2020 | 17/6/2026 | Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production. |