mitsubishielectric Vulnerabilities and Affected Products
Vulnerabilities associated with smartrtu_firmware.
Products
Clear product- mc_works646 vulnerabilities
- l02cpu-p5 vulnerabilities
- l26cpu-bt5 vulnerabilities
- melsec_l02cpu-p5 vulnerabilities
- melsec_l06cpu-p5 vulnerabilities
- melsec_l26cpu-p5 vulnerabilities
- melsec_l26cpu-pbt5 vulnerabilities
- melsec_q-q03udecpu5 vulnerabilities
- melsec_q-q04udehcpu5 vulnerabilities
- melsec_q-q06udehcpu5 vulnerabilities
- melsec_q-q100udehcpu5 vulnerabilities
- melsec_q-q10udehcpu5 vulnerabilities
- melsec_q-q13udehcpu5 vulnerabilities
- melsec_q-q20udehcpu5 vulnerabilities
- melsec_q-q26udehcpu5 vulnerabilities
- melsec_q-q50udehcpu5 vulnerabilities
- genesis642 vulnerabilities
- smartrtu_firmware2 vulnerabilities
- c_controller_module_setting_and_monitoring_tool1 vulnerability
- cpu_module_logging_configuration_tool1 vulnerability
- cw_configurator1 vulnerability
- data_transfer1 vulnerability
- ezsocket1 vulnerability
- fcsb12241 vulnerability
- fr_configurator21 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-14927HIGH | mitsubishielectric smartrtu_firmware Missing Authentication for Critical FunctionAn issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file (which contains data such as usernames, passwords, and other sensitive RTU data). | CVSS7.5v3.1 | EPSS41.8% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-14931CRITICAL | mitsubishielectric smartrtu_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote OS Command Injection vulnerability allows an attacker to execute arbitrary commands on the RTU due to the passing of unsafe user supplied data to the RTU's system shell. Functionality in mobile.php provides users with the ability to ping sites or IP addresses via Mobile Connection Test. When the Mobile Connection Test is submitted, action.php is ca… CWE-78Oct 28, 2019 | CVSS9.8v3.1 | EPSS57.7% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |