Melsec Q Series Q26Udvcpu
Approved changes feed: RSS · Atom
cpe:2.3:a:mitsubishi_electric_corporation:melsec-q_series_q26udvcpu:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mitsubishi Electric Corporation (d664dc32-cd69-5fcd-bcda-db4283d1f666) |
|---|---|
| Product | Melsec Q Series Q26Udvcpu (de8c9a32-9ce1-5884-9c1b-5bd4a281f6f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8531 |
vulnerable | 2026-06-08 07:45:20.692464 |
Details available
MEDIUM (6.8)
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with the first 5 digits of serial No. "24082" to "27081" allows a remote attacker to cause an integer underflow by sending specially crafted packets to the affected product to stop Ethernet communication and the execution of control programs on the product, when the user authentication function is enabled. The user authentication function is enabled by default only when settings are configured by GX Works2, which complies with the Cybersecurity Law of the People's Republic of China, and is normally disabled.
Published: 2025-09-19T09:30:21.832Z
Updated: 2025-09-24T05:39:19.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1917 |
vulnerable | 2026-06-08 06:27:14.990670 |
Details available
CRITICAL (9.8)
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-15T00:02:39.351Z
Updated: 2024-08-27T19:58:12.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1916 |
vulnerable | 2026-06-08 06:27:14.985307 |
Details available
CRITICAL (9.8)
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-15T00:01:39.440Z
Updated: 2024-08-27T19:57:29.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1915 |
vulnerable | 2026-06-08 06:27:14.970603 |
Details available
CRITICAL (9.8)
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-15T00:00:46.607Z
Updated: 2024-08-27T19:56:54.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0803 |
vulnerable | 2026-06-08 06:22:02.771043 |
Details available
CRITICAL (9.8)
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Published: 2024-03-14T23:59:20.916Z
Updated: 2024-08-27T19:56:00.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0802 |
vulnerable | 2026-06-08 06:22:02.757402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0457 |
vulnerable | 2026-06-08 05:52:05.055933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.