CVE-2022-33323

Katalog CVE

CVSS 7.5 · High EPSS 1,1%

Kerentanan Active Debug Code pada mitsubishielectric rh-12sdh55 firmware, mitsubishielectric rh-12sdh70 firmware +49 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Rincian

Terbit di NVD

2 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-489: Active Debug Code

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05 advisory pihak ketiga · pemerintah AS
• https://jvn.jp/vu/JVNVU94588481/index.html advisory pihak ketiga