CVE-2023-2846highCWE-294

CVE-2023-2846: falha de alta gravidade em Mitsubishi Electric Corporation MELSEC-F…

Authentication Bypass Vulnerability in MELSEC-F Series main module

Publicada em 30 jun 2023 · Atualizada em 05 mar 2025

Seguir esta CVE + Monitorar MELSEC-F Series FX3G-14MR/DS + Monitorar MELSEC-F Series FX3G-14MR/ES

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.3%

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Produtos afetados

Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-14MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-24MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-40MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3G-60MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3GA-24MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3GA-24MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3GA-40MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3GA-40MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3GA-60MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3GA-60MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3GC-32MT/D Mitsubishi Electric Corporation · MELSEC-F Series FX3GC-32MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-24MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-24MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-24MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-24MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-24MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-24MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-40MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-40MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-40MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-40MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-40MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3GE-40MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-10MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-10MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-10MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-10MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-10MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-10MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-14MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-14MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-14MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-14MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-14MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-14MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-20MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-20MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-20MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-20MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-20MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-20MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MR/ES-2AD Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MT/ES-2AD Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3S-30MT/ESS-2AD Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-10MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-10MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-14MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-14MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-20MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-20MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-30MR-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3SA-30MT-CM Mitsubishi Electric Corporation · MELSEC-F Series FX3U-128MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-128MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-128MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-128MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-128MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-16MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MR/UA1 Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MS/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-32MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-48MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MR/UA1 Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MS/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-64MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MR/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MR/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MR/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MT/DS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MT/ES Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MT/ES-A Mitsubishi Electric Corporation · MELSEC-F Series FX3U-80MT/ESS Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-16MR/DS-T Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-16MR/D-T Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-16MT/D Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-16MT/D-P4 Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-16MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-16MT/DSS-P4 Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-32MT/D Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-32MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-32MT-LT Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-32MT-LT-2 Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-64MT/D Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-64MT/DSS Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-96MT/D Mitsubishi Electric Corporation · MELSEC-F Series FX3UC-96MT/DSS

CVEs relacionadas — Mitsubishi Electric Corporation MELSEC-F…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4562CRITICALInformation Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main moduleEPSS 1.2%CVE-2023-4699CRITICALArbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA productsEPSS 1.1%

Referências

https://jvn.jp/vu/JVNVU94519952 https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04 https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf