Melsoft navigator

This hub aggregates every CVE we track for Melsoft navigator, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Melsoft navigator.

• CVE-2023-6943Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) ver...9.8Jan 30, 2024
• CVE-2023-6942Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 V...7.5Jan 30, 2024
• CVE-2023-5247Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicio...7.8Nov 30, 2023
• CVE-2023-4088Malicious Code Execution Vulnerability in FA Engineering Software Products9.3Sep 20, 2023
• CVE-2020-14496Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues8.3May 19, 2022
• CVE-2020-14523Mitsubishi Electric Factory Automation Products Path Traversal8.3Feb 11, 2022
• CVE-2020-14521Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element8.3Feb 11, 2022
• CVE-2021-20607Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions ...5.5Dec 17, 2021
• CVE-2021-20606Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions...5.5Dec 17, 2021
• CVE-2021-20588Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator ve...7.5Feb 19, 2021
• CVE-2021-20587Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, ...7.5Feb 19, 2021
• CVE-2020-5603Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlie...7.5Jun 30, 2020
• CVE-2020-5602Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ve...7.5Jun 30, 2020