Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mitsubishi Electric Corporation — Vulnerabilities & Security Advisories 124

Browse all 124 CVE security advisories affecting Mitsubishi Electric Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mitsubishi Electric Corporation operates as a global manufacturer of industrial automation, electronics, and energy systems, providing critical infrastructure components for manufacturing and power grids. Security audits reveal a significant attack surface, with 119 recorded Common Vulnerabilities and Exposures (CVEs) associated with its diverse product portfolio. Historically, these vulnerabilities frequently involve remote code execution (RCE) and cross-site scripting (XSS), often stemming from legacy web interfaces or embedded controllers lacking modern input validation. Privilege escalation flaws also appear, allowing unauthorized users to gain administrative control over industrial control systems. While no single catastrophic incident has defined the company’s public security history, the high volume of CVEs indicates systemic issues in legacy device hardening. This profile highlights the persistent risks inherent in maintaining extensive industrial IoT ecosystems, where outdated firmware and complex network architectures create persistent entry points for potential adversaries targeting critical operational technology.

CVE ID Title CVSS Severity Published
CVE-2026-15688 Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting — GX Works3 CWE-303 9.2 Critical 2026-09-17
CVE-2026-13584 Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol — MELSEC MX Controller MX-R model MXR300-16 CWE-924 7.1 High 2026-07-30
CVE-2026-8806 Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module — Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP CWE-440 - - 2026-06-19
CVE-2026-8805 Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module — Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP CWE-190 - - 2026-06-19
CVE-2026-5667 Information Disclosure, Information Tampering, or Denial-of-Service (DoS) Vulnerability in Multiple Home Appliances — Room Air Conditioners (for Japan) MSZ-BKR2223-W CWE-798 - - 2026-06-17
CVE-2025-14816 Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64 — GENESIS64 CWE-317 5.5AI Medium AI 2026-04-08
CVE-2025-14815 Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64 — GENESIS64 CWE-312 6.2AI Medium AI 2026-04-08
CVE-2025-2399 Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series — Mitsubishi Electric CNC M800V Series M800VW CWE-1285 5.9 Medium 2026-03-10
CVE-2026-1876 Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet module — MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP CWE-404 7.5AI High AI 2026-03-03
CVE-2026-1875 Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module — MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP CWE-404 7.5AI High AI 2026-03-03
CVE-2026-1874 Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module and Ethernet module — MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP CWE-670 7.5AI High AI 2026-03-03
CVE-2025-15080 Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products — MELSEC iQ-R Series R08PCPU CWE-1284 9.8AI Critical AI 2026-02-05
CVE-2025-10314 Malicious Code Execution Vulnerability in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for Windows — FREQSHIP-mini for Windows CWE-276 8.8 High 2026-02-05
CVE-2025-11774 Malicious Code Execution Vulnerability in the Software Keyboard Function of GENESIS64, ICONICS Suite, Mobile HMI, and MC Works64 — GENESIS64 CWE-78 8.2 High 2025-12-19
CVE-2025-11009 Information Disclosure Vulnerability in GT Designer3 — GT Designer3 Version1 (GOT2000) CWE-312 5.1 Medium 2025-12-17
CVE-2025-3784 Information Disclosure Vulnerability in GX Works2 — GX Works2 CWE-312 5.5 Medium 2025-11-27
CVE-2025-10089 Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S — MILCO.S Setting Application CWE-427 7.7 High 2025-11-18
CVE-2025-10259 Denial-of-Service(DoS) Vulnerability in TCP Communication Function on MELSEC iQ-F Series CPU module — MELSEC iQ-F Series FX5U-32MT/ES CWE-1284 5.3 Medium 2025-11-06
CVE-2025-8531 Mitsubishi Electric MELSEC-Q Series 安全漏洞 — MELSEC-Q Series Q03UDVCPU CWE-130 6.8 Medium 2025-09-19
CVE-2025-7731 Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module — MELSEC iQ-F Series FX5U-32MT/ES CWE-319 7.5 High 2025-09-01
CVE-2025-7405 Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module — MELSEC iQ-F Series FX5U-32MT/ES CWE-306 7.3 High 2025-09-01
CVE-2025-5514 Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module — MELSEC iQ-F Series FX5U-32MT/ES CWE-130 5.3 Medium 2025-08-25
CVE-2025-7376 Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS — GENESIS64 CWE-64 5.9 Medium 2025-08-06
CVE-2025-5241 Denial-of-Service Vulnerability in MELSEC iQ-F Series — MELSEC iQ-F Series FX5U-32MT/ES CWE-645 5.3 Medium 2025-07-11
CVE-2025-5023 Mitsubishi Electric PV-DR004J 信任管理问题漏洞 — PV-DR004J CWE-798 7.1 High 2025-07-10
CVE-2025-5022 Mitsubishi Electric PV-DR004J 安全漏洞 — PV-DR004J CWE-521 6.5 Medium 2025-07-10
CVE-2025-3699 Mitsubishi Electric多款产品 访问控制错误漏洞 — G-50 CWE-306 9.8 Critical 2025-06-26
CVE-2025-3755 Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module — MELSEC iQ-F Series FX5U-32MT/ES CWE-1285 9.1 Critical 2025-05-29
CVE-2025-0921 Information Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizViz — GENESIS64 CWE-250 6.5 Medium 2025-05-15
CVE-2025-3511 Mitsubishi Electric多款产品 安全漏洞 — CC-Link IE TSN Remote I/O module NZ2GN2S1-32D CWE-1284 7.5 High 2025-04-25

This page lists every published CVE security advisory associated with Mitsubishi Electric Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.