Mitsubishielectric Smartrtu Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Mitsubishielectric Smartrtu Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2019-14931 — CVSS 9.8 (critical): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An…
• CVE-2019-14929 — CVSS 9.8 (critical): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored…
• CVE-2019-14930 — CVSS 9.8 (critical): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Undocumented…
• CVE-2019-14926 — CVSS 9.8 (critical): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH…
• CVE-2019-14927 — CVSS 7.5 (high): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An…
• CVE-2018-16060 — CVSS 7.5 (high): Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code)…
• CVE-2019-14925 — CVSS 6.5 (medium): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A…
• CVE-2018-16061 — CVSS 6.1 (medium): Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.
• CVE-2019-14928 — CVSS 5.4 (medium): An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A number of…