CVE-2023-0457

EUVD-2023-12511
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MitsubishiCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
mitsubishielectricfx5uc-32mr\/ds-ts_firmware
*
mitsubishielectricfx5uc-32mt\/d_firmware
*
mitsubishielectricfx5uc-32mt\/dss_firmware
*
mitsubishielectricfx5uc-32mt\/dss-ts_firmware
*
mitsubishielectricfx5uc-32mt\/ds-ts_firmware
*
mitsubishielectricfx5uc-64mt\/d_firmware
*
mitsubishielectricfx5uc-64mt\/dss_firmware
*
mitsubishielectricfx5uc-96mt\/d_firmware
*
mitsubishielectricfx5uc-96mt\/dss_firmware
*
mitsubishielectricfx5uj-24mr\/es_firmware
*
mitsubishielectricfx5uj-24mr\/es-a_firmware
*
mitsubishielectricfx5uj-24mt\/es_firmware
*
mitsubishielectricfx5uj-24mt\/es-a_firmware
*
mitsubishielectricfx5uj-24mt\/ess_firmware
*
mitsubishielectricfx5uj-40mr\/es_firmware
*
mitsubishielectricfx5uj-40mr\/es-a_firmware
*
mitsubishielectricfx5uj-40mt\/es_firmware
*
mitsubishielectricfx5uj-40mt\/es-a_firmware
*
mitsubishielectricfx5uj-40mt\/ess_firmware
*
mitsubishielectricfx5uj-60mr\/es_firmware
*
mitsubishielectricfx5uj-60mr\/es-a_firmware
*
mitsubishielectricfx5uj-60mt\/es_firmware
*
mitsubishielectricfx5uj-60mt\/es-a_firmware
*
mitsubishielectricfx5uj-60mt\/ess_firmware
*
mitsubishielectricfx5s-30mr\/es_firmware
*
mitsubishielectricfx5s-30mt\/es_firmware
*
mitsubishielectricfx5s-30mt\/ess_firmware
*
mitsubishielectricfx5s-40mr\/es_firmware
*
mitsubishielectricfx5s-40mt\/es_firmware
*
mitsubishielectricfx5s-40mt\/ess_firmware
*
mitsubishielectricfx5s-60mr\/es_firmware
*
mitsubishielectricfx5s-60mt\/es_firmware
*
mitsubishielectricfx5s-60mt\/ess_firmware
*
mitsubishielectricfx5s-80mr\/es_firmware
*
mitsubishielectricfx5s-80mt\/es_firmware
*
mitsubishielectricfx5s-80mt\/ess_firmware
*
mitsubishielectricfx5-enet_firmware
-
mitsubishielectricfx5-enet\/ip_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/vu/JVNVU93891523/index.html
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf
https://jvn.jp/vu/JVNVU93891523/index.html
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf