GCVE - cpe:2.3:h:mitsubishielectric:r120psfcpu:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mitsubishielectric:r120psfcpu:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mitsubishielectric (`4baed789-ac20-5dd5-8550-a965394bc219`)
Product	R120Psfcpu (`50a0618e-39a9-5ca7-bbe5-4d4efb94785f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6815`	not_vulnerable	2026-06-08 06:21:55.922386	Details available MEDIUM (6.5) Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet. Published: 2024-02-13T06:27:51.202Z Updated: 2024-08-02T08:42:07.419Z Open on db.gcve.eu Reference links https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-021_en.pdf https://jvn.jp/vu/JVNVU95085830/index.html https://www.cisa.gov/news-events/ics-advisories/icsa-24-044-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20599`	not_vulnerable	2026-06-08 05:29:09.721830	Details available CRITICAL (9.1) Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password. Published: 2021-10-14T00:00:00.000Z Updated: 2024-08-03T17:45:44.681Z Open on db.gcve.eu Reference links https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-011_en.pdf https://jvn.jp/vu/JVNVU98578731 https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20599`	vulnerable	2026-06-08 05:29:09.715587	Details available CRITICAL (9.1) Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password. Published: 2021-10-14T00:00:00.000Z Updated: 2024-08-03T17:45:44.681Z Open on db.gcve.eu Reference links https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-011_en.pdf https://jvn.jp/vu/JVNVU98578731 https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20598`	not_vulnerable	2026-06-08 05:29:09.712074	Details available Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password. Published: 2021-08-06T16:53:47.000Z Updated: 2024-08-03T17:45:44.713Z Open on db.gcve.eu Reference links https://jvn.jp/vu/JVNVU98578731/index.html https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-010_en.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20597`	not_vulnerable	2026-06-08 05:29:09.708425	Details available Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to the target unauthorizedly by sniffing network traffic and obtaining credentials when registering user information in the target or changing a password. Published: 2021-08-06T00:00:00.000Z Updated: 2024-08-03T17:45:44.727Z Open on db.gcve.eu Reference links https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-009_en.pdf https://jvn.jp/vu/JVNVU98578731/index.html https://www.cisa.gov/uscert/ics/advisories/icsa-21-250-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20594`	not_vulnerable	2026-06-08 05:29:09.696633	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20591`	not_vulnerable	2026-06-08 05:29:09.667022	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5668`	not_vulnerable	2026-06-08 05:26:43.491744	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.