CVE-2023-4699
06.11.2023, 06:15
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishi Electric CNC M800/M80/E80 series and Mitsubishi Electric CNC M700V/M70V/E70 series allows a remote unauthenticated attacker to execute arbitrary commands by sending specific packets to the affected products. This could lead to disclose or tamper with information by reading or writing control programs, or cause a denial-of-service (DoS) condition on the products by resetting the memory contents of the products to factory settings or resetting the products remotely.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mitsubishielectric | fx3u-32mt/es_firmware | - |
| mitsubishielectric | fx3u-48mt/es_firmware | - |
| mitsubishielectric | fx3u-64mt/es_firmware | - |
| mitsubishielectric | fx3u-80mt/es_firmware | - |
| mitsubishielectric | fx3u-128mt/e_firmware | - |
| mitsubishielectric | fx3u-16mt/es_firmware | - |
| mitsubishielectric | fx3u-16mr/es_firmware | - |
| mitsubishielectric | fx3u-32mr/es_firmware | - |
| mitsubishielectric | fx3u-48mr/es_firmware | - |
| mitsubishielectric | fx3u-64mr/es_firmware | - |
| mitsubishielectric | fx3u-80mr/es_firmware | - |
| mitsubishielectric | fx3u-128mr/es_firmware | - |
| mitsubishielectric | fx3u-16mt/ess_firmware | - |
| mitsubishielectric | fx3u-32mt/ess_firmware | - |
| mitsubishielectric | fx3u-48mt/ess_firmware | - |
| mitsubishielectric | fx3u-64mt/ess_firmware | - |
| mitsubishielectric | fx3u-80mt/ess_firmware | - |
| mitsubishielectric | fx3u-128mt/ess_firmware | - |
| mitsubishielectric | fx3u-16mt/ds_firmware | - |
| mitsubishielectric | fx3u-32mt/ds_firmware | - |
| mitsubishielectric | fx3u-48mt/ds_firmware | - |
| mitsubishielectric | fx3u-64mt/ds_firmware | - |
| mitsubishielectric | fx3u-80mt/ds_firmware | - |
| mitsubishielectric | fx3u-128mt/ds_firmware | - |
| mitsubishielectric | fx3u-16mr/ds_firmware | - |
| mitsubishielectric | fx3u-32mr/ds_firmware | - |
| mitsubishielectric | fx3u-48mr/ds_firmware | - |
| mitsubishielectric | fx3u-64mr/ds_firmware | - |
| mitsubishielectric | fx3u-80mr/ds_firmware | - |
| mitsubishielectric | fx3u-128mr/ds_firmware | - |
| mitsubishielectric | fx3u-16mt/dss_firmware | - |
| mitsubishielectric | fx3u-32mt/dss_firmware | - |
| mitsubishielectric | fx3u-48mt/dss_firmware | - |
| mitsubishielectric | fx3u-64mt/dss_firmware | - |
| mitsubishielectric | fx3u-80mt/dss_firmware | - |
| mitsubishielectric | fx3u-128mt/dss_firmware | - |
| mitsubishielectric | fx3u-32mr/ua1_firmware | - |
| mitsubishielectric | fx3u-64mr/ua1_firmware | - |
| mitsubishielectric | fx3u-32ms/es_firmware | - |
| mitsubishielectric | fx3u-64ms/es_firmware | - |
| mitsubishielectric | fx3u-16mt/es-a_firmware | - |
| mitsubishielectric | fx3u-32mt/es-a_firmware | - |
| mitsubishielectric | fx3u-48mt/es-a_firmware | - |
| mitsubishielectric | fx3u-64mt/es-a_firmware | - |
| mitsubishielectric | fx3u-80mt/es-a_firmware | - |
| mitsubishielectric | fx3u-128mt/es-a_firmware | - |
| mitsubishielectric | fx3u-16mr/es-a_firmware | - |
| mitsubishielectric | fx3u-32mr/es-a_firmware | - |
| mitsubishielectric | fx3u-48mr/es-a_firmware | - |
| mitsubishielectric | fx3u-64mr/es-a_firmware | - |
| mitsubishielectric | fx3u-80mr/es-a_firmware | - |
| mitsubishielectric | fx3u-128mr/es-a_firmware | - |
| mitsubishielectric | fx3uc-16mt/d_firmware | - |
| mitsubishielectric | fx3uc-32mt/d_firmware | - |
| mitsubishielectric | fx3uc-64mt/d_firmware | - |
| mitsubishielectric | fx3uc-96mt/d_firmware | - |
| mitsubishielectric | fx3uc-16mt/dss_firmware | - |
| mitsubishielectric | fx3uc-32mt/dss_firmware | - |
| mitsubishielectric | fx3uc-64mt/dss_firmware | - |
| mitsubishielectric | fx3uc-96mt/dss_firmware | - |
| mitsubishielectric | fx3uc-16mr/d-t_firmware | - |
| mitsubishielectric | fx3uc-16mr/ds-t_firmware | - |
| mitsubishielectric | fx3uc-32mt-lt_firmware | - |
| mitsubishielectric | fx3uc-32mt-lt-2_firmware | - |
| mitsubishielectric | fx3uc-16mt/d-p4_firmware | - |
| mitsubishielectric | fx3uc-16mt/dss-p4_firmware | - |
| mitsubishielectric | fx3g-14mt/es_firmware | - |
| mitsubishielectric | fx3g-24mt/es_firmware | - |
| mitsubishielectric | fx3g-40mt/es_firmware | - |
| mitsubishielectric | fx3g-60mt/es_firmware | - |
| mitsubishielectric | fx3g-14mr/es_firmware | - |
| mitsubishielectric | fx3g-24mr/es_firmware | - |
| mitsubishielectric | fx3g-40mr/es_firmware | - |
| mitsubishielectric | fx3g-60mr/es_firmware | - |
| mitsubishielectric | fx3g-14mt/ess_firmware | - |
| mitsubishielectric | fx3g-24mt/ess_firmware | - |
| mitsubishielectric | fx3g-40mt/ess_firmware | - |
| mitsubishielectric | fx3g-60mt/ess_firmware | - |
| mitsubishielectric | fx3g-14mt/ds_firmware | - |
| mitsubishielectric | fx3g-24mt/ds_firmware | - |
| mitsubishielectric | fx3g-40mt/ds_firmware | - |
| mitsubishielectric | fx3g-60mt/ds_firmware | - |
| mitsubishielectric | fx3g-14mr/ds_firmware | - |
| mitsubishielectric | fx3g-24mr/ds_firmware | - |
| mitsubishielectric | fx3g-40mr/ds_firmware | - |
| mitsubishielectric | fx3g-60mr/ds_firmware | - |
| mitsubishielectric | fx3g-14mt/dss_firmware | - |
| mitsubishielectric | fx3g-24mt/dss_firmware | - |
| mitsubishielectric | fx3g-40mt/dss_firmware | - |
| mitsubishielectric | fx3g-60mt/dss_firmware | - |
| mitsubishielectric | fx3g-14mt/es-a_firmware | - |
| mitsubishielectric | fx3g-24mt/es-a_firmware | - |
| mitsubishielectric | fx3g-40mt/es-a_firmware | - |
| mitsubishielectric | fx3g-60mt/es-a_firmware | - |
| mitsubishielectric | fx3g-14mr/es-a_firmware | - |
| mitsubishielectric | fx3g-24mr/es-a_firmware | - |
| mitsubishielectric | fx3g-40mr/es-a_firmware | - |
| mitsubishielectric | fx3g-60mr/es-a_firmware | - |
| mitsubishielectric | fx3gc-32mt/d_firmware | - |
| mitsubishielectric | fx3gc-32mt/dss_firmware | - |
| mitsubishielectric | fx3ge-24mt/es_firmware | - |
| mitsubishielectric | fx3ge-40mt/es_firmware | - |
| mitsubishielectric | fx3ge-24mr/es_firmware | - |
| mitsubishielectric | fx3ge-40mr/es_firmware | - |
| mitsubishielectric | fx3ge-24mt/ess_firmware | - |
| mitsubishielectric | fx3ge-40mt/ess_firmware | - |
| mitsubishielectric | fx3ge-24mt/ds_firmware | - |
| mitsubishielectric | fx3ge-40mt/ds_firmware | - |
| mitsubishielectric | fx3ge-24mr/ds_firmware | - |
| mitsubishielectric | fx3ge-40mr/ds_firmware | - |
| mitsubishielectric | fx3ge-24mt/dss_firmware | - |
| mitsubishielectric | fx3ge-40mt/dss_firmware | - |
| mitsubishielectric | fx3ga-24mt-cm_firmware | - |
| mitsubishielectric | fx3ga-40mt-cm_firmware | - |
| mitsubishielectric | fx3ga-60mt-cm_firmware | - |
| mitsubishielectric | fx3ga-24mr-cm_firmware | - |
| mitsubishielectric | fx3ga-40mr-cm_firmware | - |
| mitsubishielectric | fx3ga-60mr-cm_firmware | - |
| mitsubishielectric | fx3s-10mt/es_firmware | - |
| mitsubishielectric | fx3s-14mt/es_firmware | - |
| mitsubishielectric | fx3s-20mt/es_firmware | - |
| mitsubishielectric | fx3s-30mt/es_firmware | - |
| mitsubishielectric | fx3s-10mr/es_firmware | - |
| mitsubishielectric | fx3s-14mr/es_firmware | - |
| mitsubishielectric | fx3s-20mr/es_firmware | - |
| mitsubishielectric | fx3s-30mr/es_firmware | - |
| mitsubishielectric | fx3s-10mt/ess_firmware | - |
| mitsubishielectric | fx3s-14mt/ess_firmware | - |
| mitsubishielectric | fx3s-20mt/ess_firmware | - |
| mitsubishielectric | fx3s-30mt/ess_firmware | - |
| mitsubishielectric | fx3s-10mt/ds_firmware | - |
| mitsubishielectric | fx3s-14mt/ds_firmware | - |
| mitsubishielectric | fx3s-20mt/ds_firmware | - |
| mitsubishielectric | fx3s-30mt/ds_firmware | - |
| mitsubishielectric | fx3s-10mr/ds_firmware | - |
| mitsubishielectric | fx3s-14mr/ds_firmware | - |
| mitsubishielectric | fx3s-20mr/ds_firmware | - |
| mitsubishielectric | fx3s-30mr/ds_firmware | - |
| mitsubishielectric | fx3s-10mt/dss_firmware | - |
| mitsubishielectric | fx3s-14mt/dss_firmware | - |
| mitsubishielectric | fx3s-20mt/dss_firmware | - |
| mitsubishielectric | fx3s-30mt/dss_firmware | - |
| mitsubishielectric | fx3s-30mt/es-2ad_firmware | - |
| mitsubishielectric | fx3s-30mr/es-2ad_firmware | - |
| mitsubishielectric | fx3s-30mt/ess-2ad_firmware | - |
| mitsubishielectric | fx3sa-10mt-cm_firmware | - |
| mitsubishielectric | fx3sa-14mt-cm_firmware | - |
| mitsubishielectric | fx3sa-20mt-cm_firmware | - |
| mitsubishielectric | fx3sa-30mt-cm_firmware | - |
| mitsubishielectric | fx3sa-10mr-cm_firmware | - |
| mitsubishielectric | fx3sa-14mr-cm_firmware | - |
| mitsubishielectric | fx3sa-20mr-cm_firmware | - |
| mitsubishielectric | fx3sa-30mr-cm_firmware | - |
| mitsubishielectric | fx5u-32mt/es_firmware | - |
| mitsubishielectric | fx5u-64mt/es_firmware | - |
| mitsubishielectric | fx5u-80mt/es_firmware | - |
| mitsubishielectric | fx5u-32mr/es_firmware | - |
| mitsubishielectric | fx5u-64mr/es_firmware | - |
| mitsubishielectric | fx5u-80mr/es_firmware | - |
| mitsubishielectric | fx5u-32mt/ds_firmware | - |
| mitsubishielectric | fx5u-64mt/ds_firmware | - |
| mitsubishielectric | fx5u-80mt/ds_firmware | - |
| mitsubishielectric | fx5u-32mr/ds_firmware | - |
| mitsubishielectric | fx5u-64mr/ds_firmware | - |
| mitsubishielectric | fx5u-80mr/ds_firmware | - |
| mitsubishielectric | fx5u-32mt/ess_firmware | - |
| mitsubishielectric | fx5u-64mt/ess_firmware | - |
| mitsubishielectric | fx5u-80mt/ess_firmware | - |
| mitsubishielectric | fx5u-32mt/dss_firmware | - |
| mitsubishielectric | fx5u-64mt/dss_firmware | - |
| mitsubishielectric | fx5u-80mt/dss_firmware | - |
| mitsubishielectric | fx5uc-32mt/d_firmware | - |
| mitsubishielectric | fx5uc-64mt/d_firmware | - |
| mitsubishielectric | fx5uc-96mt/d_firmware | - |
| mitsubishielectric | fx5uc-32mt/dss_firmware | - |
| mitsubishielectric | fx5uc-64mt/dss_firmware | - |
| mitsubishielectric | fx5uc-96mt/dss_firmware | - |
| mitsubishielectric | fx5uc-32mt/ds-ts_firmware | - |
| mitsubishielectric | fx5uc-32mt/dss-ts_firmware | - |
| mitsubishielectric | fx5uc-32mr/ds-ts_firmware | - |
| mitsubishielectric | fx5uj-24mt/es_firmware | - |
| mitsubishielectric | fx5uj-40mt/es_firmware | - |
| mitsubishielectric | fx5uj-60mt/es_firmware | - |
| mitsubishielectric | fx5uj-24mr/es_firmware | - |
| mitsubishielectric | fx5uj-40mr/es_firmware | - |
| mitsubishielectric | fx5uj-60mr/es_firmware | - |
| mitsubishielectric | fx5uj-24mt/ess_firmware | - |
| mitsubishielectric | fx5uj-40mt/ess_firmware | - |
| mitsubishielectric | fx5uj-60mt/ess_firmware | - |
| mitsubishielectric | fx5uj-24mt/ds_firmware | - |
| mitsubishielectric | fx5uj-40mt/ds_firmware | - |
| mitsubishielectric | fx5uj-60mt/ds_firmware | - |
| mitsubishielectric | fx5uj-24mr/ds_firmware | - |
| mitsubishielectric | fx5uj-40mr/ds_firmware | - |
| mitsubishielectric | fx5uj-60mr/ds_firmware | - |
| mitsubishielectric | fx5uj-24mt/dss_firmware | - |
| mitsubishielectric | fx5uj-40mt/dss_firmware | - |
| mitsubishielectric | fx5uj-60mt/dss_firmware | - |
| mitsubishielectric | fx5uj-24mt/es-a_firmware | - |
| mitsubishielectric | fx5uj-40mt/es-a_firmware | - |
| mitsubishielectric | fx5uj-60mt/es-a_firmware | - |
| mitsubishielectric | fx5uj-24mr/es-a_firmware | - |
| mitsubishielectric | fx5uj-40mr/es-a_firmware | - |
| mitsubishielectric | fx5uj-60mr/es-a_firmware | - |
| mitsubishielectric | fx5s-30mt/es_firmware | - |
| mitsubishielectric | fx5s-40mt/es_firmware | - |
| mitsubishielectric | fx5s-60mt/es_firmware | - |
| mitsubishielectric | fx5s-80mt/es_firmware | - |
| mitsubishielectric | fx5s-30mr/es_firmware | - |
| mitsubishielectric | fx5s-40mr/es_firmware | - |
| mitsubishielectric | fx5s-60mr/es_firmware | - |
| mitsubishielectric | fx5s-80mr/es_firmware | - |
| mitsubishielectric | fx5s-30mt/ess_firmware | - |
| mitsubishielectric | fx5s-40mt/ess_firmware | - |
| mitsubishielectric | fx5s-60mt/ess_firmware | - |
| mitsubishielectric | fx5s-80mt/ess_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-306 - Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
- CWE-345 - Insufficient Verification of Data AuthenticityThe software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
References