CVEvulnerability

CVE-2023-2846

9.1 CRITICAL Published 2023-06-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-294

Description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Affected configurations

• mitsubishielectric fx3u-16mr\/es firmware • mitsubishielectric fx3u-16mt\/es firmware • mitsubishielectric fx3u-16mt\/ess firmware • mitsubishielectric fx3u-32mr\/es firmware • mitsubishielectric fx3u-32mt\/es firmware • mitsubishielectric fx3u-32mt\/ess firmware • mitsubishielectric fx3u-48mr\/es firmware • mitsubishielectric fx3u-48mt\/es firmware • mitsubishielectric fx3u-48mt\/ess firmware • mitsubishielectric fx3u-64mr\/es firmware • mitsubishielectric fx3u-64mt\/es firmware • mitsubishielectric fx3u-64mt\/ess firmware • mitsubishielectric fx3u-80mr\/es firmware • mitsubishielectric fx3u-80mt\/es firmware • mitsubishielectric fx3u-80mt\/ess firmware • mitsubishielectric fx3u-128mr\/es firmware • mitsubishielectric fx3u-128mt\/es firmware • mitsubishielectric fx3u-128mt\/ess firmware • mitsubishielectric fx3u-16mr\/ds firmware • mitsubishielectric fx3u-16mt\/ds firmware • mitsubishielectric fx3u-16mt\/dss firmware • mitsubishielectric fx3u-32mr\/ds firmware • mitsubishielectric fx3u-32mt\/ds firmware • mitsubishielectric fx3u-32mt\/dss firmware • mitsubishielectric fx3u-48mr\/ds firmware • mitsubishielectric fx3u-48mt\/ds firmware • mitsubishielectric fx3u-48mt\/dss firmware • mitsubishielectric fx3u-64mr\/ds firmware • mitsubishielectric fx3u-64mt\/ds firmware • mitsubishielectric fx3u-64mt\/dss firmware • mitsubishielectric fx3u-80mr\/ds firmware • mitsubishielectric fx3u-80mt\/ds firmware • mitsubishielectric fx3u-80mt\/dss firmware • mitsubishielectric fx3u-32mr\/ua1 firmware • mitsubishielectric fx3u-64mr\/ua1 firmware • mitsubishielectric fx3u-32ms\/es firmware • mitsubishielectric fx3u-64ms\/es firmware • mitsubishielectric fx3u-16mr\/es-a firmware • mitsubishielectric fx3u-16mt\/es-a firmware • mitsubishielectric fx3u-32mr\/es-a firmware • mitsubishielectric fx3u-32mt\/es-a firmware • mitsubishielectric fx3u-48mr\/es-a firmware • mitsubishielectric fx3u-48mt\/es-a firmware • mitsubishielectric fx3u-64mr\/es-a firmware • mitsubishielectric fx3u-64mt\/es-a firmware • mitsubishielectric fx3u-80mr\/es-a firmware • mitsubishielectric fx3u-80mt\/es-a firmware • mitsubishielectric fx3u-128mr\/es-a firmware • mitsubishielectric fx3u-128mt\/es-a firmware • mitsubishielectric fx3uc-16mt\/d firmware • mitsubishielectric fx3uc-32mt\/d firmware • mitsubishielectric fx3uc-64mt\/d firmware • mitsubishielectric fx3uc-96mt\/d firmware • mitsubishielectric fx3uc-16mt\/dss firmware • mitsubishielectric fx3uc-32mt\/dss firmware • mitsubishielectric fx3uc-64mt\/dss firmware • mitsubishielectric fx3uc-96mt\/dss firmware • mitsubishielectric fx3uc-16mr\/d-t firmware • mitsubishielectric fx3uc-16mr\/ds-t firmware • mitsubishielectric fx3uc-32mt-lt firmware … and 90 more

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References