CRITICAL🇵🇱 Wersja polska

CVE-2023-4562

CVSS 9.1v3.1pub. 2023-10-13upd. 2024-11-21

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Mitsubishielectric Fx3g 14 Mr\/ds

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mr\/ds

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mr\/ds Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mr\/ds Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mr\/es

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mr\/es

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mr\/es A

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mr\/es A Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mr\/es Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mr\/es Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/ds

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/ds

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/ds Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/ds Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/dss

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/dss

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/dss Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/dss Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/es

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/es

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/es A

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/es A Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/es Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/es Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/ess

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/ess

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14 Mt\/ess Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 14mt\/ess Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 232adp\( Mb\)

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Fx3g 232adp\( Mb\) Firmware

    OS
    Mitsubishielectric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2020-16226CRITICAL9.8PL ✓same product

Podatność na podszywanie się pod urządzenie w produktach Mitsubishi Electric — RCE

CVE-2023-6943CRITICAL9.8PL ✓same vendor

Unsafe Reflection w oprogramowaniu Mitsubishi Electric — zdalne wykonanie kodu

CVE-2023-4699CRITICAL10.0PL ✓same vendor

Brak uwierzytelnienia w sterownikach PLC i CNC Mitsubishi Electric — RCE

CVE-2023-4088CRITICAL9.3PL ✓same vendor

Nieprawidłowe domyślne uprawnienia w oprogramowaniu Mitsubishi Electric GX Works3

CVE-2023-3346CRITICAL9.8PL ✓same vendor

Buffer Overflow w Mitsubishi CNC Series umożliwia RCE i DoS