Mitsubishi IU1-1M20-D Firmware 1.0.7

CPE Details

Mitsubishi IU1-1M20-D Firmware 1.0.7
mitsubishielectric
iu1-1m20-d_firmware
1.0.7
2020-03-17
12h56 +00:00
2021-05-24
11h20 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:mitsubishielectric:iu1-1m20-d_firmware:1.0.7:*:*:*:*:*:*:*

Informations

Vendor

mitsubishielectric

Product

iu1-1m20-d_firmware

Version

1.0.7

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-16226 2020-10-05 17h19 +00:00 Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
9.8
Critical
CVE-2020-5547 2020-03-16 00h25 +00:00 Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
9.8
Critical
CVE-2020-5545 2020-03-16 00h25 +00:00 TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the network functions or execute malware via a specially crafted packet.
9.8
Critical
CVE-2020-5546 2020-03-16 00h25 +00:00 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows an attacker on the same network segment to stop the network functions or execute malware via a specially crafted packet.
8.8
High
CVE-2020-5543 2020-03-16 00h25 +00:00 TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage sessions, which allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
9.8
Critical
CVE-2020-5544 2020-03-16 00h25 +00:00 Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
9.8
Critical
CVE-2020-5542 2020-03-16 00h25 +00:00 Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
9.8
Critical
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.