Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)1.00%—Mitsubishielectric Rj71en71 FirmwareMitsubishielectric R04encpu FirmwareMitsubishielectric R08encpu FirmwareMitsubishielectric R16encpu Firmware+230/11/202217/6/2026
Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of…
ModificadaAlta (7.5)4.9%—Mitsubishielectric R00cpu FirmwareMitsubishielectric R01cpu FirmwareMitsubishielectric R02cpu FirmwareMitsubishielectric R04cpu Firmware+2420/11/202017/6/2026
Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU…
ModificadaCrítica (9.8)2.3%—Mitsubishielectric Qj71mes96 FirmwareMitsubishielectric Qj71ws96 FirmwareMitsubishielectric Q06ccpu-v FirmwareMitsubishielectric Q24dhccpu-v Firmware+915/10/202017/6/2026
Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
ModificadaAlta (7.5)3.3%—Mitsubishielectric Melsec Iq-r00cpu FirmwareMitsubishielectric Melsec Iq-r01cpu FirmwareMitsubishielectric Melsec Iq-r02cpu FirmwareMitsubishielectric Melsec Iq-r04cpu Firmware+1710/6/202017/6/2026
Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production.