CVE-2023-0457

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MitsubishiCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
mitsubishielectricfx5uc-32mr\/ds-ts_firmware
*
mitsubishielectricfx5uc-32mt\/d_firmware
*
mitsubishielectricfx5uc-32mt\/dss_firmware
*
mitsubishielectricfx5uc-32mt\/dss-ts_firmware
*
mitsubishielectricfx5uc-32mt\/ds-ts_firmware
*
mitsubishielectricfx5uc-64mt\/d_firmware
*
mitsubishielectricfx5uc-64mt\/dss_firmware
*
mitsubishielectricfx5uc-96mt\/d_firmware
*
mitsubishielectricfx5uc-96mt\/dss_firmware
*
mitsubishielectricfx5uj-24mr\/es_firmware
*
mitsubishielectricfx5uj-24mr\/es-a_firmware
*
mitsubishielectricfx5uj-24mt\/es_firmware
*
mitsubishielectricfx5uj-24mt\/es-a_firmware
*
mitsubishielectricfx5uj-24mt\/ess_firmware
*
mitsubishielectricfx5uj-40mr\/es_firmware
*
mitsubishielectricfx5uj-40mr\/es-a_firmware
*
mitsubishielectricfx5uj-40mt\/es_firmware
*
mitsubishielectricfx5uj-40mt\/es-a_firmware
*
mitsubishielectricfx5uj-40mt\/ess_firmware
*
mitsubishielectricfx5uj-60mr\/es_firmware
*
mitsubishielectricfx5uj-60mr\/es-a_firmware
*
mitsubishielectricfx5uj-60mt\/es_firmware
*
mitsubishielectricfx5uj-60mt\/es-a_firmware
*
mitsubishielectricfx5uj-60mt\/ess_firmware
*
mitsubishielectricfx5s-30mr\/es_firmware
*
mitsubishielectricfx5s-30mt\/es_firmware
*
mitsubishielectricfx5s-30mt\/ess_firmware
*
mitsubishielectricfx5s-40mr\/es_firmware
*
mitsubishielectricfx5s-40mt\/es_firmware
*
mitsubishielectricfx5s-40mt\/ess_firmware
*
mitsubishielectricfx5s-60mr\/es_firmware
*
mitsubishielectricfx5s-60mt\/es_firmware
*
mitsubishielectricfx5s-60mt\/ess_firmware
*
mitsubishielectricfx5s-80mr\/es_firmware
*
mitsubishielectricfx5s-80mt\/es_firmware
*
mitsubishielectricfx5s-80mt\/ess_firmware
*
mitsubishielectricfx5-enet_firmware
-
mitsubishielectricfx5-enet\/ip_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/vu/JVNVU93891523/index.html
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf
https://jvn.jp/vu/JVNVU93891523/index.html
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf