Log in Start free

Vulnerability · Published Mar 3, 2023 · Assigned by Mitsubishi

CVE-2023-0457Information Disclosure Vulnerability in MELSEC Series

High 7.5

In plain English

A high-severity security flaw in MELSEC iQ-F Series FX5-ENET from Mitsubishi Electric Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.2%top 32.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Affected products (as reported)

VendorProductVersions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/DS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/DS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/DS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ESS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ESS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ESS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DSS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DSS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DSS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/D all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/D all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/D all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/DSS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/DSS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-24MT/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-40MT/ES all versions
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-60MT/ES all versions

Weakness: CWE-256 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References