Log in Start free

Vulnerability · Published Jun 30, 2023 · Assigned by Mitsubishi

CVE-2023-2846Authentication Bypass Vulnerability in MELSEC-F Series main module

High 7.5

In plain English

A high-severity security flaw in MELSEC-F Series FX3U-128MR/ES from Mitsubishi Electric Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.3%top 29.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Affected products (as reported)

VendorProductVersions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MR/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/ESS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-32MR/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-32MT/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-32MT/ESS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-48MR/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-48MT/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-48MT/ESS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-64MR/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-64MT/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-64MT/ESS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-80MR/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-80MT/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-80MT/ESS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-128MR/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-128MT/ES all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-128MT/ESS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MR/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/DSS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-32MR/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-32MT/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-32MT/DSS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-48MR/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-48MT/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-48MT/DSS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-64MR/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-64MT/DS all versions
Mitsubishi Electric Corporation MELSEC-F Series FX3U-64MT/DSS all versions

Weakness: CWE-294 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References