CVE-2023-2846

Katalog CVE

CVSS 9.1 · Critical EPSS 1,3%

Kerentanan Authentication Bypass by Capture-replay pada mitsubishielectric fx3u-16mr/es firmware, mitsubishielectric fx3u-16mt/es firmware +58 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Rincian

Terbit di NVD

30 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-294: Authentication Bypass by Capture-replay

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 150 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf mitigasi · advisory vendor
• https://jvn.jp/vu/JVNVU94519952 mitigasi · advisory pihak ketiga
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04 mitigasi · advisory pihak ketiga · pemerintah AS