CVEvulnerability

CVE-2023-0457

7.5 HIGH Published 2023-03-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-256, CWE-522

Description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Affected configurations

• mitsubishielectric fx5uc-32mr\/ds-ts firmware • mitsubishielectric fx5uc-32mt\/d firmware • mitsubishielectric fx5uc-32mt\/dss firmware • mitsubishielectric fx5uc-32mt\/dss-ts firmware • mitsubishielectric fx5uc-32mt\/ds-ts firmware • mitsubishielectric fx5uc-64mt\/d firmware • mitsubishielectric fx5uc-64mt\/dss firmware • mitsubishielectric fx5uc-96mt\/d firmware • mitsubishielectric fx5uc-96mt\/dss firmware • mitsubishielectric fx5uj-24mr\/es firmware • mitsubishielectric fx5uj-24mr\/es-a firmware • mitsubishielectric fx5uj-24mt\/es firmware • mitsubishielectric fx5uj-24mt\/es-a firmware • mitsubishielectric fx5uj-24mt\/ess firmware • mitsubishielectric fx5uj-40mr\/es firmware • mitsubishielectric fx5uj-40mr\/es-a firmware • mitsubishielectric fx5uj-40mt\/es firmware • mitsubishielectric fx5uj-40mt\/es-a firmware • mitsubishielectric fx5uj-40mt\/ess firmware • mitsubishielectric fx5uj-60mr\/es firmware • mitsubishielectric fx5uj-60mr\/es-a firmware • mitsubishielectric fx5uj-60mt\/es firmware • mitsubishielectric fx5uj-60mt\/es-a firmware • mitsubishielectric fx5uj-60mt\/ess firmware • mitsubishielectric fx5s-30mr\/es firmware • mitsubishielectric fx5s-30mt\/es firmware • mitsubishielectric fx5s-30mt\/ess firmware • mitsubishielectric fx5s-40mr\/es firmware • mitsubishielectric fx5s-40mt\/es firmware • mitsubishielectric fx5s-40mt\/ess firmware • mitsubishielectric fx5s-60mr\/es firmware • mitsubishielectric fx5s-60mt\/es firmware • mitsubishielectric fx5s-60mt\/ess firmware • mitsubishielectric fx5s-80mr\/es firmware • mitsubishielectric fx5s-80mt\/es firmware • mitsubishielectric fx5s-80mt\/ess firmware • mitsubishielectric fx5-enet firmware • mitsubishielectric fx5-enet\/ip firmware

Related

Weakness · CWE (2)

  • CWE-256 Plaintext Storage of a Password weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References