CVE-2023-2846

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
MitsubishiCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
mitsubishielectricfx3u-16mr\/es_firmware
-
mitsubishielectricfx3u-16mt\/es_firmware
-
mitsubishielectricfx3u-16mt\/ess_firmware
-
mitsubishielectricfx3u-32mr\/es_firmware
-
mitsubishielectricfx3u-32mt\/es_firmware
-
mitsubishielectricfx3u-32mt\/ess_firmware
-
mitsubishielectricfx3u-48mr\/es_firmware
-
mitsubishielectricfx3u-48mt\/es_firmware
-
mitsubishielectricfx3u-48mt\/ess_firmware
-
mitsubishielectricfx3u-64mr\/es_firmware
-
mitsubishielectricfx3u-64mt\/es_firmware
-
mitsubishielectricfx3u-64mt\/ess_firmware
-
mitsubishielectricfx3u-80mr\/es_firmware
-
mitsubishielectricfx3u-80mt\/es_firmware
-
mitsubishielectricfx3u-80mt\/ess_firmware
-
mitsubishielectricfx3u-128mr\/es_firmware
-
mitsubishielectricfx3u-128mt\/es_firmware
-
mitsubishielectricfx3u-128mt\/ess_firmware
-
mitsubishielectricfx3u-16mr\/ds_firmware
-
mitsubishielectricfx3u-16mt\/ds_firmware
-
mitsubishielectricfx3u-16mt\/dss_firmware
-
mitsubishielectricfx3u-32mr\/ds_firmware
-
mitsubishielectricfx3u-32mt\/ds_firmware
-
mitsubishielectricfx3u-32mt\/dss_firmware
-
mitsubishielectricfx3u-48mr\/ds_firmware
-
mitsubishielectricfx3u-48mt\/ds_firmware
-
mitsubishielectricfx3u-48mt\/dss_firmware
-
mitsubishielectricfx3u-64mr\/ds_firmware
-
mitsubishielectricfx3u-64mt\/ds_firmware
-
mitsubishielectricfx3u-64mt\/dss_firmware
-
mitsubishielectricfx3u-80mr\/ds_firmware
-
mitsubishielectricfx3u-80mt\/ds_firmware
-
mitsubishielectricfx3u-80mt\/dss_firmware
-
mitsubishielectricfx3u-32mr\/ua1_firmware
-
mitsubishielectricfx3u-64mr\/ua1_firmware
-
mitsubishielectricfx3u-32ms\/es_firmware
-
mitsubishielectricfx3u-64ms\/es_firmware
-
mitsubishielectricfx3u-16mr\/es-a_firmware
-
mitsubishielectricfx3u-16mt\/es-a_firmware
-
mitsubishielectricfx3u-32mr\/es-a_firmware
-
mitsubishielectricfx3u-32mt\/es-a_firmware
-
mitsubishielectricfx3u-48mr\/es-a_firmware
-
mitsubishielectricfx3u-48mt\/es-a_firmware
-
mitsubishielectricfx3u-64mr\/es-a_firmware
-
mitsubishielectricfx3u-64mt\/es-a_firmware
-
mitsubishielectricfx3u-80mr\/es-a_firmware
-
mitsubishielectricfx3u-80mt\/es-a_firmware
-
mitsubishielectricfx3u-128mr\/es-a_firmware
-
mitsubishielectricfx3u-128mt\/es-a_firmware
-
mitsubishielectricfx3uc-16mt\/d_firmware
-
mitsubishielectricfx3uc-32mt\/d_firmware
-
mitsubishielectricfx3uc-64mt\/d_firmware
-
mitsubishielectricfx3uc-96mt\/d_firmware
-
mitsubishielectricfx3uc-16mt\/dss_firmware
-
mitsubishielectricfx3uc-32mt\/dss_firmware
-
mitsubishielectricfx3uc-64mt\/dss_firmware
-
mitsubishielectricfx3uc-96mt\/dss_firmware
-
mitsubishielectricfx3uc-16mr\/d-t_firmware
-
mitsubishielectricfx3uc-16mr\/ds-t_firmware
-
mitsubishielectricfx3uc-32mt-lt_firmware
-
mitsubishielectricfx3uc-32mt-lt-2_firmware
-
mitsubishielectricfx3uc-16mt\/d-p4_firmware
-
mitsubishielectricfx3uc-16mt\/dss-p4_firmware
-
mitsubishielectricfx3g-14mr\/es_firmware
-
mitsubishielectricfx3g-14mt\/es_firmware
-
mitsubishielectricfx3g-14mt\/ess_firmware
-
mitsubishielectricfx3g-24mr\/es_firmware
-
mitsubishielectricfx3g-24mt\/es_firmware
-
mitsubishielectricfx3g-24mt\/ess_firmware
-
mitsubishielectricfx3g-40mr\/es_firmware
-
mitsubishielectricfx3g-40mt\/es_firmware
-
mitsubishielectricfx3g-40mt\/ess_firmware
-
mitsubishielectricfx3g-60mr\/es_firmware
-
mitsubishielectricfx3g-60mt\/es_firmware
-
mitsubishielectricfx3g-60mt\/ess_firmware
-
mitsubishielectricfx3g-14mr\/ds_firmware
-
mitsubishielectricfx3g-14mt\/ds_firmware
-
mitsubishielectricfx3g-14mt\/dss_firmware
-
mitsubishielectricfx3g-24mr\/ds_firmware
-
mitsubishielectricfx3g-24mt\/ds_firmware
-
mitsubishielectricfx3g-24mt\/dss_firmware
-
mitsubishielectricfx3g-40mr\/ds_firmware
-
mitsubishielectricfx3g-40mt\/ds_firmware
-
mitsubishielectricfx3g-40mt\/dss_firmware
-
mitsubishielectricfx3g-60mr\/ds_firmware
-
mitsubishielectricfx3g-60mt\/ds_firmware
-
mitsubishielectricfx3g-60mt\/dss_firmware
-
mitsubishielectricfx3g-14mr\/es-a_firmware
-
mitsubishielectricfx3g-14mt\/es-a_firmware
-
mitsubishielectricfx3g-24mr\/es-a_firmware
-
mitsubishielectricfx3g-24mt\/es-a_firmware
-
mitsubishielectricfx3g-40mr\/es-a_firmware
-
mitsubishielectricfx3g-40mt\/es-a_firmware
-
mitsubishielectricfx3g-60mr\/es-a_firmware
-
mitsubishielectricfx3g-60mt\/es-a_firmware
-
mitsubishielectricfx3gc-32mt\/d_firmware
-
mitsubishielectricfx3gc-32mt\/dss_firmware
-
mitsubishielectricfx3ge-24mr\/es_firmware
-
mitsubishielectricfx3ge-24mt\/es_firmware
-
mitsubishielectricfx3ge-24mt\/ess_firmware
-
mitsubishielectricfx3ge-40mr\/es_firmware
-
mitsubishielectricfx3ge-40mt\/es_firmware
-
mitsubishielectricfx3ge-40mt\/ess_firmware
-
mitsubishielectricfx3ge-24mr\/ds_firmware
-
mitsubishielectricfx3ge-24mt\/ds_firmware
-
mitsubishielectricfx3ge-24mt\/dss_firmware
-
mitsubishielectricfx3ge-40mr\/ds_firmware
-
mitsubishielectricfx3ge-40mt\/ds_firmware
-
mitsubishielectricfx3ge-40mt\/dss_firmware
-
mitsubishielectricfx3ga-24mr-cm_firmware
-
mitsubishielectricfx3ga-24mt-cm_firmware
-
mitsubishielectricfx3ga-40mr-cm_firmware
-
mitsubishielectricfx3ga-40mt-cm_firmware
-
mitsubishielectricfx3ga-60mr-cm_firmware
-
mitsubishielectricfx3ga-60mt-cm_firmware
-
mitsubishielectricfx3s-10mr\/ds_firmware
-
mitsubishielectricfx3s-10mr\/es_firmware
-
mitsubishielectricfx3s-10mt\/ds_firmware
-
mitsubishielectricfx3s-10mt\/dss_firmware
-
mitsubishielectricfx3s-10mt\/es_firmware
-
mitsubishielectricfx3s-10mt\/ess_firmware
-
mitsubishielectricfx3s-14mr\/ds_firmware
-
mitsubishielectricfx3s-14mr\/es_firmware
-
mitsubishielectricfx3s-14mt\/ds_firmware
-
mitsubishielectricfx3s-14mt\/dss_firmware
-
mitsubishielectricfx3s-14mt\/es_firmware
-
mitsubishielectricfx3s-14mt\/ess_firmware
-
mitsubishielectricfx3s-20mr\/ds_firmware
-
mitsubishielectricfx3s-20mr\/es_firmware
-
mitsubishielectricfx3s-20mt\/ds_firmware
-
mitsubishielectricfx3s-20mt\/dss_firmware
-
mitsubishielectricfx3s-20mt\/es_firmware
-
mitsubishielectricfx3s-20mt\/ess_firmware
-
mitsubishielectricfx3s-30mr\/ds_firmware
-
mitsubishielectricfx3s-30mr\/es_firmware
-
mitsubishielectricfx3s-30mt\/ds_firmware
-
mitsubishielectricfx3s-30mt\/dss_firmware
-
mitsubishielectricfx3s-30mt\/es_firmware
-
mitsubishielectricfx3s-30mt\/ess_firmware
-
mitsubishielectricfx3s-30mr\/es-2ad_firmware
-
mitsubishielectricfx3s-30mt\/es-2ad_firmware
-
mitsubishielectricfx3s-30mt\/ess-2ad_firmware
-
mitsubishielectricfx3sa-10mr-cm_firmware
-
mitsubishielectricfx3sa-10mt-cm_firmware
-
mitsubishielectricfx3sa-14mr-cm_firmware
-
mitsubishielectricfx3sa-14mt-cm_firmware
-
mitsubishielectricfx3sa-20mr-cm_firmware
-
mitsubishielectricfx3sa-20mt-cm_firmware
-
mitsubishielectricfx3sa-30mr-cm_firmware
-
mitsubishielectricfx3sa-30mt-cm_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/vu/JVNVU94519952
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf
https://jvn.jp/vu/JVNVU94519952
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf