8.8
Élevée
CVE-2025-15080 Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU,…
Description
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MELSEC iQ-R Series R08PCPU | Versions non publiées | |
| MELSEC iQ-R Series R16PCPU | Versions non publiées | |
| MELSEC iQ-R Series R32PCPU | Versions non publiées | |
| MELSEC iQ-R Series R120PCPU | Versions non publiées |
Autres CVE de MELSEC iQ-R Series R08PCPU
Les 8 CVE de MELSEC iQ-R Series R08PCPU →
CVE-2023-4699
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU…
10.0
Critique
CVE-2023-4625
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC…
5.3
Moyenne
CVE-2023-1424
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric…
10.0
Critique
CVE-2023-0457
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series,…
7.5
Élevée