158 matches found
Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25158)
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext. This...
Mitsubishi Electric FA Products Authentication Bypass By Capture-Replay (CVE-2022-25159)
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote unauthenticated attacker to login to the product by replay attack. This plugin only works with...
Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25160)
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote unauthenticated attacker to disclose a file in a legitimate user's product by using previousl...
fa.uni-lj.si Cross Site Scripting vulnerability OBB-2421587
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fa-muehlich.de Improper Access Control vulnerability OBB-2410676
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mitsubishi Electric FA Engineering Software 数字错误漏洞
Mitsubishi Electric FA engineering software is an engineering software from Mitsubishi Electric Japan. It provides improved efficiency in design and debugging, reduced downtime, and data protection. The Mitsubishi Electric FA engineering software suffers from a numeric error vulnerability that...
Mitsubishi Electric FA Engineering Software (Update B)
1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Vulnerabilities: Out-of-bounds Read, Integer Underflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-350-05...
PT-2021-09: Possibility of authorization in Remote Password mechanism using password hash
The vulnerability of the FX5UC CPU and FX5UJ CPU modules of Mitsubishi Electric FA products is associated with the possibility of using a weak password hash. Exploiting the vulnerability may allow an attacker to use the resulting hash value to recover the password value. Advisory status 15.12.202...
CVE-2021-20588
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR...
Input validation
Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering SoftwareCPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR...
Heap overflow
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions...
CVE-2021-20588
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR...
CVE-2021-20588
CVE-2021-20588 concerns an improper handling of length parameter inconsistency in Mitsubishi Electric FA Engineering Software. A remote, unauthenticated attacker can cause a DoS on affected software by spoofing MELSEC, GOT or FREQROL and returning crafted replies; exploitation may potentially lea...
CVE-2021-20587
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions...
CVE-2021-20587
CVE-2021-20587 is a heap-based buffer overflow in Mitsubishi Electric FA Engineering Software products (numerous tools such as CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator family, GT Designer3/GOT variants, GX/GX Works, MELSOFT EM/Navigator, etc...
PT-2021-14060 · Mitsubishi · Mitsubishi Electric Fa Engineering
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric FA Engineering Software versions prior to the fixed version Description: A heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software allows a remote unauthenticated attacker to cause a DoS...
Mitsubishi Electric FA Engineering Software Products (Update H)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Products Vulnerabilities: Heap-based Buffer Overflow, Improper Handling of Length Parameter Inconsistency 2. UPDATE INFORMATION This updated...
Mitsubishi Electric FA Engineering Software Buffer Error Vulnerability
Mitsubishi Electric FA Engineering Software is a series of engineering software from Mitsubishi Electric Japan. A buffer error vulnerability exists in Mitsubishi Electric FA Engineering Software. The vulnerability stems from the software's mishandling of parameter lengths, and could allow an...
