Skip to content
Fencer Intel
critical 9.8

CVE-2020-16226 json

Mitsubishi Electric Multiple Products

published 6y ago modified 4mo ago also EUVD-2020-8192

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.3%
EPSS 2.3% chance of exploitation in 30 days, percentile 83%
public exploits
0
none known

Summary

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

Patch / fix

  • Mitsubishi Electric RnCPU(n=00/01/02) Version 18 and prior
  • Mitsubishi Electric RnCPU(n=04/08/16/32/120) Version 50 and prior
  • Mitsubishi Electric RnENCPU(n=04/08/16/32/120) Version 50 and prior
  • Mitsubishi Electric FX5UC-32M*/**-TS Version 1.210 and prior

Is CVE-2020-16226 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-20-245-01 updated cvss 7.3

Mitsubishi Electric Multiple Products (Update G)

  • Mitsubishi Electric Conveyor Tracking Application APR-1TR3FH (Discontinued product) Mitsubishi Electric Conveyor Tracking Application APR-1TR6FH (Discontinued product) Mitsubishi Electric Conveyor Tracking Application APR-1TR12FH (Discontinued product) Mitsubishi Electric Conveyor Tracking Application APR-1TR20FH (Discontinued product) Mitsubishi Electric Conveyor Tracking Application APR-2TR3FH (Discontinued product) Mitsubishi Electric Conveyor Tracking Application APR-2TR6FH (Discontinued product)
    +2 more products
    Mitsubishi Electric Conveyor Tracking Application APR-2TR12FH (Discontinued product) Mitsubishi Electric Conveyor Tracking Application APR-2TR20FH (Discontinued product)
    affected: mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric FR-A8NCG <=Production_date_August_2020 Mitsubishi Electric FR-A800-E Series <=production_date_December_2020 Mitsubishi Electric FR-E800-EPA Series <=Production_date_July_2020 Mitsubishi Electric FR-E800-EPB Series <=Production_date_July_2020 Mitsubishi Electric FR-F800-E Series <=production_date_December_2020 Mitsubishi Electric FX3GE-**M*/** <=the_first_3_digits_of_serial_number_20X
    +7 more products
    Mitsubishi Electric FX3U-ENET <=1.14 Mitsubishi Electric FX3U-ENET-ADP <=1.22 Mitsubishi Electric FX3U-ENET-L <=1.14 Mitsubishi Electric FX3U-ENET-P502 <=1.14 Mitsubishi Electric FX5-CCLGN-MS 1.000 Mitsubishi Electric FX5-ENET <=1.002 Mitsubishi Electric FX5-ENET/IP <=1.002
    affected: vendor fix, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric FX5U(C)-**M*/** Serial number 17X**** or later <=1.210
    affected: fixed in 1.211, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric FX5U(C)-**M*/** Serial number 179**** and prior <=1.070
    affected: fixed in 1.071, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric FX5UC-32M*/**-TS <=1.210
    affected: fixed in 1.211, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric FX5UJ-**M*/** 1.000
    affected: fixed in 1.001, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric GOT1000 Series GT14 Model
    affected: mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric GOT2000 Series GT21 Model <=01.44.000 Mitsubishi Electric GS Series GS21 Model <=01.44.000 Mitsubishi Electric GT25-J71GN13-T2 <=03
    affected: vendor fix, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
show 5 more
  • Mitsubishi Electric IU1-1M20-D
    affected: mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric L02CPU(-P) <=the_first_5_digits_of_serial_number_22051 Mitsubishi Electric L06CPU(-P) <=the_first_5_digits_of_serial_number_22051 Mitsubishi Electric L26CPU-(P)BT <=the_first_5_digits_of_serial_number_22051 Mitsubishi Electric L26CPU(-P) <=the_first_5_digits_of_serial_number_22051
    affected: vendor fix, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric LE7-40GU-L screen package data <=1.01
    affected: mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric LJ71E71-100 <=the_first_5_digits_of_serial_number_21092
    affected: vendor fix, mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com
  • Mitsubishi Electric MR-J4-TM Mitsubishi Electric MR-JE-C Mitsubishi Electric NZ2FT-EIP Mitsubishi Electric NZ2FT-MT
    affected: mitigation “Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:” mitsubishielectric.com

64 more affected in the full advisory

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

2.27% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • Mitsubishi Electric QJ71MES96
  • Mitsubishi Electric QJ71WS96
  • Mitsubishi Electric Q06CCPU-V
  • Mitsubishi Electric Q24DHCCPU-V
  • Mitsubishi Electric Q24DHCCPU-VG
  • Mitsubishi Electric R12CCPU-V
  • Mitsubishi Electric RD55UP06-V,
  • Mitsubishi Electric D55UP12-V
  • Mitsubishi Electric RJ71GN11-T2
  • Mitsubishi Electric RJ71EN71
  • Mitsubishi Electric QJ71E71-100
  • Mitsubishi Electric LJ71E71-100
  • Mitsubishi Electric QJ71MT91
  • Mitsubishi Electric RD78Gn(n=4,8,16,32,64)
  • Mitsubishi Electric RD78GHV
  • Mitsubishi Electric RD78GHW
  • Mitsubishi Electric NZ2GACP620-60
  • Mitsubishi Electric NZ2GACP620-300
  • Mitsubishi Electric NZ2FT-MT
  • Mitsubishi Electric NZ2FT-EIP
  • Mitsubishi Electric Q03UDECPU
  • Mitsubishi Electric QnUDEHCPU(n=04/06/10/13/20/26/50/100)
  • Mitsubishi Electric QnUDVCPU(n=03/04/06/13/26)
  • Mitsubishi Electric QnUDPVCPU(n=04/06/13/2)
  • Mitsubishi Electric LnCPU(-P)(n=02/06/26)
  • Mitsubishi Electric L26CPU-(P)BT
  • Mitsubishi Electric RnCPU(n=00/01/02)
  • Mitsubishi Electric RnCPU(n=04/08/16/32/120)
  • Mitsubishi Electric RnENCPU(n=04/08/16/32/120)
  • Mitsubishi Electric RnSFCPU (n=08/16/32/120)
  • Mitsubishi Electric RnPCPU(n=08/16/32/120)
  • Mitsubishi Electric RnPSFCPU(n=08/16/32/120)
  • Mitsubishi Electric FX5U(C)-**M*/**
  • Mitsubishi Electric FX5UC-32M*/**-TS
  • Mitsubishi Electric FX5UJ-**M*/**
  • Mitsubishi Electric FX5-ENET
  • Mitsubishi Electric FX5-ENET/IP
  • Mitsubishi Electric FX3U-ENET-ADP
  • Mitsubishi Electric FX3GE-**M*/**
  • Mitsubishi Electric FX3U-ENET
  • Mitsubishi Electric FX3U-ENET-L
  • Mitsubishi Electric FX3U-ENET-P502
  • Mitsubishi Electric FX5-CCLGN-MS
  • Mitsubishi Electric IU1-1M20-D
  • Mitsubishi Electric LE7-40GU-L
  • Mitsubishi Electric GOT2000 Series GT21 Model
  • Mitsubishi Electric GS Series
  • Mitsubishi Electric GOT1000 Series GT14 Model
  • Mitsubishi Electric GT25-J71GN13-T2
  • Mitsubishi Electric FR-A800-E Series

Classification

Weakness
  • CWE-342 Predictable Exact Value from Previous Values

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.