Approved changes feed: RSS · Atom

cpe:2.3:a:mitsubishi_electric_corporation:melsec-q_series_q04udvcpu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMitsubishi Electric Corporation (d664dc32-cd69-5fcd-bcda-db4283d1f666)
ProductMelsec Q Series Q04Udvcpu (f7386ce4-0551-568d-9863-ac91ccff0617)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8531 vulnerable 2026-06-08 07:45:20.690239 Details available
MEDIUM (6.8)
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with the first 5 digits of serial No. "24082" to "27081" allows a remote attacker to cause an integer underflow by sending specially crafted packets to the affected product to stop Ethernet communication and the execution of control programs on the product, when the user authentication function is enabled. The user authentication function is enabled by default only when settings are configured by GX Works2, which complies with the Cybersecurity Law of the People's Republic of China, and is normally disabled.
Published: 2025-09-19T09:30:21.832Z
Updated: 2025-09-24T05:39:19.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1917 vulnerable 2026-06-08 06:27:14.990435 Details available
CRITICAL (9.8)
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-15T00:02:39.351Z
Updated: 2024-08-27T19:58:12.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1916 vulnerable 2026-06-08 06:27:14.985135 Details available
CRITICAL (9.8)
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-15T00:01:39.440Z
Updated: 2024-08-27T19:57:29.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1915 vulnerable 2026-06-08 06:27:14.962479 Details available
CRITICAL (9.8)
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-15T00:00:46.607Z
Updated: 2024-08-27T19:56:54.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0803 vulnerable 2026-06-08 06:22:02.770885 Details available
CRITICAL (9.8)
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-14T23:59:20.916Z
Updated: 2024-08-27T19:56:00.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0802 vulnerable 2026-06-08 06:22:02.747859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0457 vulnerable 2026-06-08 05:52:05.053784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.