# Mitsubishi Electric Multiple Products CVE record · `CVE-2020-16226` - **Identifiers:** `CVE-2020-16226` - **State:** Confirmed - **Severity:** No CVSS score - **Critical:** No - **CNA:** icscert - **Weakness (CWE):** [CWE-342](https://cwe.mitre.org/data/definitions/342.html) - **Tags:** [CWE-342](https://agentprime.io/advisories/tag/cwe-342.md) - **Technologies:** [Mitsubishi Electric QJ71MES96](https://agentprime.io/advisories/technology/mitsubishi-electric-qj71mes96.md) · [Mitsubishi Electric QJ71WS96](https://agentprime.io/advisories/technology/mitsubishi-electric-qj71ws96.md) · [Mitsubishi Electric Q06CCPU-V](https://agentprime.io/advisories/technology/mitsubishi-electric-q06ccpu-v.md) · [Mitsubishi Electric Q24DHCCPU-V](https://agentprime.io/advisories/technology/mitsubishi-electric-q24dhccpu-v.md) · [Mitsubishi Electric Q24DHCCPU-VG](https://agentprime.io/advisories/technology/mitsubishi-electric-q24dhccpu-vg.md) · [Mitsubishi Electric R12CCPU-V](https://agentprime.io/advisories/technology/mitsubishi-electric-r12ccpu-v.md) · [Mitsubishi Electric RD55UP06-V,](https://agentprime.io/advisories/technology/mitsubishi-electric-rd55up06-v.md) · [Mitsubishi Electric D55UP12-V](https://agentprime.io/advisories/technology/mitsubishi-electric-d55up12-v.md) · [Mitsubishi Electric RJ71GN11-T2](https://agentprime.io/advisories/technology/mitsubishi-electric-rj71gn11-t2.md) · [Mitsubishi Electric RJ71EN71](https://agentprime.io/advisories/technology/mitsubishi-electric-rj71en71.md) · [Mitsubishi Electric QJ71E71-100](https://agentprime.io/advisories/technology/mitsubishi-electric-qj71e71-100.md) · [Mitsubishi Electric LJ71E71-100](https://agentprime.io/advisories/technology/mitsubishi-electric-lj71e71-100.md) · [Mitsubishi Electric QJ71MT91](https://agentprime.io/advisories/technology/mitsubishi-electric-qj71mt91.md) · [Mitsubishi Electric RD78Gn(n=4,8,16,32,64)](https://agentprime.io/advisories/technology/mitsubishi-electric-rd78gn-n-4-8-16-32-64.md) · [Mitsubishi Electric RD78GHV](https://agentprime.io/advisories/technology/mitsubishi-electric-rd78ghv.md) · [Mitsubishi Electric RD78GHW](https://agentprime.io/advisories/technology/mitsubishi-electric-rd78ghw.md) · [Mitsubishi Electric NZ2GACP620-60](https://agentprime.io/advisories/technology/mitsubishi-electric-nz2gacp620-60.md) · [Mitsubishi Electric NZ2GACP620-300](https://agentprime.io/advisories/technology/mitsubishi-electric-nz2gacp620-300.md) · [Mitsubishi Electric NZ2FT-MT](https://agentprime.io/advisories/technology/mitsubishi-electric-nz2ft-mt.md) · [Mitsubishi Electric NZ2FT-EIP](https://agentprime.io/advisories/technology/mitsubishi-electric-nz2ft-eip.md) - **Published:** 5 Oct 2020 - **Updated:** 17 Sept 2024 - **Reviewed by a person:** No Published by the CVE Program (CNA: icscert) at 5 Oct 2020, 17:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. ## Affected products, as the CNA wrote them - Vendor: Mitsubishi Electric. Product: QJ71MES96. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: QJ71WS96. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: Q06CCPU-V. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: Q24DHCCPU-V. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: Q24DHCCPU-VG. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: R12CCPU-V. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RD55UP06-V,. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: D55UP12-V. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RJ71GN11-T2. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RJ71EN71. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: QJ71E71-100. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: LJ71E71-100. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: QJ71MT91. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RD78Gn(n=4,8,16,32,64). - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RD78GHV. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RD78GHW. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: NZ2GACP620-60. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: NZ2GACP620-300. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: NZ2FT-MT. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: NZ2FT-EIP. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: Q03UDECPU. - affected: `the first 5 digits of serial number 22081 and prior` - Vendor: Mitsubishi Electric. Product: QnUDEHCPU(n=04/06/10/13/20/26/50/100). - affected: `the first 5 digits of serial number 22081 and prior` - Vendor: Mitsubishi Electric. Product: QnUDVCPU(n=03/04/06/13/26). - affected: `the first 5 digits of serial number 22031 and prior` - Vendor: Mitsubishi Electric. Product: QnUDPVCPU(n=04/06/13/2). - affected: `the first 5 digits of serial number 22031 and prior` - Vendor: Mitsubishi Electric. Product: LnCPU(-P)(n=02/06/26). - affected: `the first 5 digits of serial number 22051 and prior` - Vendor: Mitsubishi Electric. Product: L26CPU-(P)BT. - affected: `the first 5 digits of serial number 22051 and prior` - Vendor: Mitsubishi Electric. Product: RnCPU(n=00/01/02). - affected: `unspecified to before Version 18 and prior` (custom) - Vendor: Mitsubishi Electric. Product: RnCPU(n=04/08/16/32/120). - affected: `unspecified to before Version 50 and prior` (custom) - Vendor: Mitsubishi Electric. Product: RnENCPU(n=04/08/16/32/120). - affected: `unspecified to before Version 50 and prior` (custom) - Vendor: Mitsubishi Electric. Product: RnSFCPU (n=08/16/32/120). - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RnPCPU(n=08/16/32/120). - affected: `all versions` - Vendor: Mitsubishi Electric. Product: RnPSFCPU(n=08/16/32/120). - affected: `all versions` - Vendor: Mitsubishi Electric. Product: FX5U(C)-\*\*M\*/\*\*. - affected: `unspecified to before Serial number 17X**** or later: Version 1.210 and prior` (custom) - affected: `unspecified to before Serial number 179**** and prior: Version 1.070 and prior` (custom) - Vendor: Mitsubishi Electric. Product: FX5UC-32M\*/\*\*-TS. - affected: `unspecified to before Version 1.210 and prior` (custom) - Vendor: Mitsubishi Electric. Product: FX5UJ-\*\*M\*/\*\*. - affected: `Version 1.000` - Vendor: Mitsubishi Electric. Product: FX5-ENET. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: FX5-ENET/IP. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: FX3U-ENET-ADP. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: FX3GE-\*\*M\*/\*\*. - affected: `all versions` - Vendor: Mitsubishi Electric. Product: FX3U-ENET. - affected: `all versions` And 17 more products. The full list is on the CVE record: ## Not analysed yet We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter. ## Severity and exploitation No source has published a CVSS score for this record yet. - **CISA KEV:** Not listed. - **EPSS:** 0.023, the 83rd percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days. ## Timeline This record came from the full history of the CVE Program, published 5 Oct 2020. New records show when each source confirmed them. ## Sources - [CVE List: CVE-2020-16226](https://www.cve.org/CVERecord?id=CVE-2020-16226) - [NVD: CVE-2020-16226](https://nvd.nist.gov/vuln/detail/CVE-2020-16226) ### References from the CNA - Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description. ## Check whether this affects you This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run. - With the agentprime MCP server (), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: - As JSON: - Everything that needs attention now: --- The web page: . Everything for agents: .