Vulnerabilidades en Mitsubishi Electric Corporation

126 resultados
Análisis Vexday

Com 125 CVEs catalogadas, o portfólio de vulnerabilidades da Mitsubishi Electric Corporation apresenta taxa de exploração ativa abaixo da média geral do catálogo CISA KEV, sem nenhum registro confirmado de exploração em ambiente real. Ainda assim, 18 vulnerabilidades de severidade crítica merecem atenção, especialmente considerando que o tipo de falha mais frequente é CWE-306 — ausência de autenticação para função crítica —, padrão que historicamente representa risco elevado em ambientes de tecnologia operacional e sistemas de controle industrial. A CVE mais perigosa atualmente monitorada, CVE-2020-5666, registra EPSS de 0,084, indicando probabilidade de exploração ainda moderada, mas seu contexto de origem reforça a necessidade de rastreamento contínuo. A ausência de PoCs públicas reduz a superfície de ameaça imediata, porém as 5 CVEs surgidas nos últimos 90 dias sinalizam que o ritmo de descoberta de novas falhas permanece ativo e deve ser acompanhado de perto por equipes de segurança em ambientes críticos.

CVE-2025-10259MEDIUMDenial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU moduleEPSS 0.4%CVE-2025-5241MEDIUMDenial-of-Service Vulnerability in MELSEC iQ-F SeriesEPSS 0.4%CVE-2023-2062MEDIUMInformation Disclosure vulnerability in EtherNet/IP Configuration toolsEPSS 0.3%CVE-2025-7731HIGHInformation Disclosure Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.3%CVE-2023-5275LOWImproper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition EPSS 0.3%CVE-2023-5274LOWImproper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition EPSS 0.3%CVE-2024-1182HIGHUncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS SuitEPSS 0.3%CVE-2023-5247HIGHMalicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software EPSS 0.3%CVE-2024-9852HIGHMalicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32EPSS 0.2%CVE-2024-8299HIGHMalicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32EPSS 0.2%CVE-2025-5023HIGHUse of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versiEPSS 0.2%CVE-2024-8300HIGHMalicious Code Execution Vulnerability in GENESIS64 and ICONICS SuiteEPSS 0.2%CVE-2024-7587HIGHInformation Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32EPSS 0.2%CVE-2025-7376MEDIUMInformation Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISEPSS 0.2%CVE-2024-1574MEDIUMUse of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi ElecEPSS 0.2%CVE-2025-0921MEDIUMInformation Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizVizEPSS 0.2%CVE-2023-4088CRITICALMalicious Code Execution Vulnerability in FA Engineering Software ProductsEPSS 0.2%CVE-2024-3904HIGHIncorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions EPSS 0.2%CVE-2026-5667HIGHInformation Disclosure, Information Tampering, or Denial-of-Service (DoS) Vulnerability in Multiple Home AppliancesEPSS 0.2%CVE-2025-10314HIGHMalicious Code Execution Vulnerability in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for WindowsEPSS 0.1%