Mitsubishielectric R120sfcpu Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Mitsubishielectric R120sfcpu Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2021-20597 — CVSS 9.1 (critical): Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware…
• CVE-2021-20599 — CVSS 9.1 (critical): Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety…
• CVE-2021-20591 — CVSS 7.5 (high): Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions…
• CVE-2021-20594 — CVSS 7.5 (high): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules…
• CVE-2020-16850 — CVSS 7.5 (high): Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted…
• CVE-2020-5668 — CVSS 7.5 (high): Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier…
• CVE-2023-6815 — CVSS 6.5 (medium): Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all…
• CVE-2021-20598 — CVSS 5.3 (medium): Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all…