What’s Vulnerable › Vulnerabilities

CVE-2018-16060

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-15 · updated 2026-06-17
• Weakness: CWE-425

Description

Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.

Affected products

• Mitsubishielectric Smartrtu Firmware: all versions

References

• http://packetstormsecurity.com/files/164538/Mitsubishi-Electric-INEA-SmartRTU-Source-Code-Disclosure.html
• https://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH
• http://packetstormsecurity.com/files/164538/Mitsubishi-Electric-INEA-SmartRTU-Source-Code-Disclosure.html
• https://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH

Get alerted when CVE-2018-16060 or the next vulnerability affects your stack