Log in Start free

Vulnerability · Published Feb 2, 2023 · Assigned by Mitsubishi

CVE-2022-33323Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

High 7.5

In plain English

A high-severity security flaw in MELFA SD/SQ Series Controller CR1DA-721 of RV-3SD from Mitsubishi Electric Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 33.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Affected products (as reported)

VendorProductVersions
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-771 of RV-2SD S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-771 of RV-2SDB S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SD S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SD-SM S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDB S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDB-SM S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDBC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJ S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJ-SM S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJB S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJB-SM S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJBC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SD S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDL S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDLC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-711M of RV-6SDC-SM S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-711M of RV-6SDLC-SM S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701M of RV-12SD S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701 of RV-12SDC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701M of RV-12SDL S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701 of RV-12SDLC S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-781 of RH-3SDHR3515 S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-781 of RH-3SDHR3515C S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-781 of RH-3SDHR3515W S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3520 S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3532 S7x and prior
Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4520 S7x and prior

Weakness: CWE-489 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References