CVEvulnerability
CVE-2022-33323
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-489
Description
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected configurations
• mitsubishielectric rh-12sdh55 firmware
• mitsubishielectric rh-12sdh70 firmware
• mitsubishielectric rh-12sdh85 firmware
• mitsubishielectric rh-12sqh55 firmware
• mitsubishielectric rh-12sqh70 firmware
• mitsubishielectric rh-12sqh85 firmware
• mitsubishielectric rh-20sdh100 firmware
• mitsubishielectric rh-20sdh85 firmware
• mitsubishielectric rh-20sqh85 firmware
• mitsubishielectric rh-3sdhr firmware
• mitsubishielectric rh-3sqhr firmware
• mitsubishielectric rh-6sdh35 firmware
• mitsubishielectric rh-6sdh45 firmware
• mitsubishielectric rh-6sdh55 firmware
• mitsubishielectric rh-6sqh35 firmware
• mitsubishielectric rh-6sqh45 firmware
• mitsubishielectric rh-6sqh55 firmware
• mitsubishielectric rv-12sd firmware
• mitsubishielectric rv-12sdl firmware
• mitsubishielectric rv-12sq firmware
• mitsubishielectric rv-12sql firmware
• mitsubishielectric rv-2sdb firmware
• mitsubishielectric rv-2sqb firmware
• mitsubishielectric rv-3sd firmware
• mitsubishielectric rv-3sdj firmware
• mitsubishielectric rv-3sq firmware
• mitsubishielectric rv-3sqj firmware
• mitsubishielectric rv-6sd firmware
• mitsubishielectric rv-6sdl firmware
• mitsubishielectric rv-6sq firmware
• mitsubishielectric rv-6sql firmware
• mitsubishielectric rh-12fh55 firmware
• mitsubishielectric rh-12fh70 firmware
• mitsubishielectric rh-12fh85 firmware
• mitsubishielectric rh-20fh100 firmware
• mitsubishielectric rh-20fh85 firmware
• mitsubishielectric rh-3fh35 firmware
• mitsubishielectric rh-3fh45 firmware
• mitsubishielectric rh-3fh55 firmware
• mitsubishielectric rh-6fh35 firmware
• mitsubishielectric rh-6fh45 firmware
• mitsubishielectric rh-6fh55 firmware
• mitsubishielectric rv-13f firmware
• mitsubishielectric rv-13fl firmware
• mitsubishielectric rv-20f firmware
• mitsubishielectric rv-2f firmware
• mitsubishielectric rv-4f firmware
• mitsubishielectric rv-4fl firmware
• mitsubishielectric rv-7f firmware
• mitsubishielectric rv-7fl firmware
• mitsubishielectric rv-7fll firmware
Related
Weakness · CWE (1)
- CWE-489 Active Debug Code weakness
References
- https://jvn.jp/vu/JVNVU94588481/index.html Third Party Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf Vendor Advisory
- https://jvn.jp/vu/JVNVU94588481/index.html Third Party Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf Vendor Advisory