GCVE - cpe:2.3:h:mitsubishielectric:fx3u-enet-p502:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mitsubishielectric:fx3u-enet-p502:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mitsubishielectric (`4baed789-ac20-5dd5-8550-a965394bc219`)
Product	Fx3U Enet P502 (`029c770a-cd64-59f5-aea6-ac84c1d6f090`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4562`	not_vulnerable	2026-06-08 06:16:13.419739	Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module CRITICAL (9.1) Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages. Published: 2023-10-13T01:26:06.018Z Updated: 2025-02-27T20:41:33.964Z Open on db.gcve.eu Reference links https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-012_en.pdf https://jvn.jp/vu/JVNVU90509290/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-13	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20613`	not_vulnerable	2026-06-08 05:29:09.994036	Details available Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product by sending specially crafted packets. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery. Published: 2022-01-14T19:04:47.000Z Updated: 2024-08-03T17:45:44.677Z Open on db.gcve.eu Reference links https://jvn.jp/vu/JVNVU93268332/index.html https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-024_en.pdf https://www.cisa.gov/uscert/ics/advisories/icsa-22-013-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20612`	not_vulnerable	2026-06-08 05:29:09.993444	Details available Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product or other unspecified effects by sending specially crafted packets to an unnecessary opening of TCP port. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery. Published: 2022-01-14T19:04:45.000Z Updated: 2024-08-03T17:45:44.790Z Open on db.gcve.eu Reference links https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-023_en.pdf https://jvn.jp/vu/JVNVU93268332/index.html https://www.cisa.gov/uscert/ics/advisories/icsa-22-013-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16226`	not_vulnerable	2026-06-08 05:19:27.724324	Mitsubishi Electric Multiple Products Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands. Published: 2020-10-05T17:19:17.358Z Updated: 2024-09-17T00:25:38.551Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.