Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2020-16226

Mitsubishi Electric Multiple Products

No CVSS scoreEPSS 0.023 · 83rd percentile

Published by the CVE Program (CNA: icscert) at 5 Oct 2020, 17:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Mitsubishi Electric QJ71MES96
  • affected all versions
Mitsubishi Electric QJ71WS96
  • affected all versions
Mitsubishi Electric Q06CCPU-V
  • affected all versions
Mitsubishi Electric Q24DHCCPU-V
  • affected all versions
Mitsubishi Electric Q24DHCCPU-VG
  • affected all versions
Mitsubishi Electric R12CCPU-V
  • affected all versions
Mitsubishi Electric RD55UP06-V,
  • affected all versions
Mitsubishi Electric D55UP12-V
  • affected all versions
Mitsubishi Electric RJ71GN11-T2
  • affected all versions
Mitsubishi Electric RJ71EN71
  • affected all versions
Mitsubishi Electric QJ71E71-100
  • affected all versions
Mitsubishi Electric LJ71E71-100
  • affected all versions
Mitsubishi Electric QJ71MT91
  • affected all versions
Mitsubishi Electric RD78Gn(n=4,8,16,32,64)
  • affected all versions
Mitsubishi Electric RD78GHV
  • affected all versions
Mitsubishi Electric RD78GHW
  • affected all versions
Mitsubishi Electric NZ2GACP620-60
  • affected all versions
Mitsubishi Electric NZ2GACP620-300
  • affected all versions
Mitsubishi Electric NZ2FT-MT
  • affected all versions
Mitsubishi Electric NZ2FT-EIP
  • affected all versions
Mitsubishi Electric Q03UDECPU
  • affected the first 5 digits of serial number 22081 and prior
Mitsubishi Electric QnUDEHCPU(n=04/06/10/13/20/26/50/100)
  • affected the first 5 digits of serial number 22081 and prior
Mitsubishi Electric QnUDVCPU(n=03/04/06/13/26)
  • affected the first 5 digits of serial number 22031 and prior
Mitsubishi Electric QnUDPVCPU(n=04/06/13/2)
  • affected the first 5 digits of serial number 22031 and prior
Mitsubishi Electric LnCPU(-P)(n=02/06/26)
  • affected the first 5 digits of serial number 22051 and prior
Mitsubishi Electric L26CPU-(P)BT
  • affected the first 5 digits of serial number 22051 and prior
Mitsubishi Electric RnCPU(n=00/01/02)
  • affected unspecified to before Version 18 and prior custom
Mitsubishi Electric RnCPU(n=04/08/16/32/120)
  • affected unspecified to before Version 50 and prior custom
Mitsubishi Electric RnENCPU(n=04/08/16/32/120)
  • affected unspecified to before Version 50 and prior custom
Mitsubishi Electric RnSFCPU (n=08/16/32/120)
  • affected all versions
Mitsubishi Electric RnPCPU(n=08/16/32/120)
  • affected all versions
Mitsubishi Electric RnPSFCPU(n=08/16/32/120)
  • affected all versions
Mitsubishi Electric FX5U(C)-**M*/**
  • affected unspecified to before Serial number 17X**** or later: Version 1.210 and prior custom
  • affected unspecified to before Serial number 179**** and prior: Version 1.070 and prior custom
Mitsubishi Electric FX5UC-32M*/**-TS
  • affected unspecified to before Version 1.210 and prior custom
Mitsubishi Electric FX5UJ-**M*/**
  • affected Version 1.000
Mitsubishi Electric FX5-ENET
  • affected all versions
Mitsubishi Electric FX5-ENET/IP
  • affected all versions
Mitsubishi Electric FX3U-ENET-ADP
  • affected all versions
Mitsubishi Electric FX3GE-**M*/**
  • affected all versions
Mitsubishi Electric FX3U-ENET
  • affected all versions

And 17 more products. The full list is on the CVE record.

Identifiers
CVE-2020-16226
CNA
icscert
Weakness (CWE)
CWE-342
Tags
Published
5 Oct 2020
Updated
17 Sept 2024

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.023, the 83rd percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 5 Oct 2020. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.