Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
MELSEC iQ-R Series Safety CPU R08SFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R Series Safety CPU R08SFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R Series Safety CPU R08SFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "26" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R series Safety CPU R16SFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R series Safety CPU R16SFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R series Safety CPU R16SFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "26" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R series Safety CPU R32SFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R series Safety CPU R32SFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R series Safety CPU R32SFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "26" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R series Safety CPU R120SFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R series Safety CPU R120SFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R series Safety CPU R120SFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "26" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "11" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R series SIL2 Process CPU R16PSFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R series SIL2 Process CPU R16PSFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R series SIL2 Process CPU R16PSFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "11" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R series SIL2 Process CPU R32PSFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R series SIL2 Process CPU R32PSFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R series SIL2 Process CPU R32PSFCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Firmware versions "11" and prior
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC iQ-R series SIL2 Process CPU R120PSFCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC iQ-R series SIL2 Process CPU R120PSFCPU
Platforms
Unknown
Default status
unaffected
MELSEC iQ-R series SIL2 Process CPU R120PSFCPU · Scoped product and version facts