Approved changes feed: RSS · Atom

cpe:2.3:o:mitsubishielectric:r32psfcpu_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMitsubishielectric (4baed789-ac20-5dd5-8550-a965394bc219)
ProductR32Psfcpu Firmware (604c6725-4802-59da-a5f9-967a5bec0d6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6815 vulnerable 2026-06-08 06:21:55.919773 Details available
MEDIUM (6.5)
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet.
Published: 2024-02-13T06:27:51.202Z
Updated: 2024-08-02T08:42:07.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20599 vulnerable 2026-06-08 05:29:09.721779 Details available
CRITICAL (9.1)
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.
Published: 2021-10-14T00:00:00.000Z
Updated: 2024-08-03T17:45:44.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20598 vulnerable 2026-06-08 05:29:09.711922 Details available
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.
Published: 2021-08-06T16:53:47.000Z
Updated: 2024-08-03T17:45:44.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20597 vulnerable 2026-06-08 05:29:09.708269 Details available
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to the target unauthorizedly by sniffing network traffic and obtaining credentials when registering user information in the target or changing a password.
Published: 2021-08-06T00:00:00.000Z
Updated: 2024-08-03T17:45:44.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20594 vulnerable 2026-06-08 05:29:09.696581 Details available
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to acquire legitimate user names registered in the module via brute-force attack on user names.
Published: 2021-08-06T00:00:00.000Z
Updated: 2024-08-03T17:45:44.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20591 vulnerable 2026-06-08 05:29:09.665219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5668 vulnerable 2026-06-08 05:26:43.489826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.