Approved changes feed: RSS · Atom

cpe:2.3:o:mitsubishielectric:fx5uj-60mr\/ds_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorMitsubishielectric (4baed789-ac20-5dd5-8550-a965394bc219)
ProductFx5Uj 60Mr/Ds Firmware (cf1a2c55-215c-5c3a-9791-3a23426c5656)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4699 vulnerable 2026-06-03 14:53:29.463132 Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products
CRITICAL (10)
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishi Electric CNC M800/M80/E80 series and Mitsubishi Electric CNC M700V/M70V/E70 series allows a remote unauthenticated attacker to execute arbitrary commands by sending specific packets to the affected products. This could lead to disclose or tamper with information by reading or writing control programs, or cause a denial-of-service (DoS) condition on the products by resetting the memory contents of the products to factory settings or resetting the products remotely.
Published: 2023-11-06T05:02:15.543Z
Updated: 2025-12-16T18:23:26.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4625 vulnerable 2026-06-03 14:53:29.168051 Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC Series CPU module
MEDIUM (5.3)
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
Published: 2023-11-06T04:57:44.446Z
Updated: 2025-02-27T20:34:25.710Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.