Search/CVE-2020-16226
● CVE — Critical

CVE-2020-16226

VendormitsubishielectricProductqj71e71-100 firmware, q03udecpu firmware, q24dhccpu-v firmware, q24dhccpu-vg firmware, r12ccpu-v firmware, rd55up06-v firmware, lj71e71-100 firmware, lncpu(-p)(n=02/06/26) firmware, nz2ft-eip firmware, nz2ft-mt firmware, nz2gacp620-300 firmware, nz2gacp620-60 firmware, q06ccpu-v firmware, qj71mes96 firmware, qj71mt91 firmware, qj71ws96 firmware, qnudehcpu(n=04/06/10/13/20/26/50/100) firmware, qnudpvcpu(n=04/06/13/2) firmware, qnudvcpu(n=03/04/06/13/26) firmware, rd55up12-v firmware, rd78ghv firmware, rd78ghw firmware, rd78gn(n=4,8,16,32,64) firmware, rj71en71 firmware, rj71gn11-t2 firmwareDiscoveredOct 5, 2020UpdatedNov 21, 2024

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

CVSS v3.1
9.8 CRITICAL
EPSS
2.27%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Oct 5, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024