CVE-2023-0457
Information Disclosure Vulnerability in MELSEC Series
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-01-24 CVE Reserved
- 2023-03-03 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-13 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-256: Plaintext Storage of a Password
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/vu/JVNVU93891523/index.html | Third Party Advisory | |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01 | Mitigation |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf | 2023-06-21 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mr\/ds-ts Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mr\/ds-ts Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mr\/ds-ts Search vendor "Mitsubishielectric" for product "Fx5uc-32mr\/ds-ts" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/d Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/d Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/d Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/d" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/dss Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/dss-ts Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss-ts Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/dss-ts Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss-ts" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/ds-ts Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/ds-ts Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-32mt\/ds-ts Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/ds-ts" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-64mt\/d Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-64mt\/d Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-64mt\/d Search vendor "Mitsubishielectric" for product "Fx5uc-64mt\/d" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-64mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-64mt\/dss Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-64mt\/dss Search vendor "Mitsubishielectric" for product "Fx5uc-64mt\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-96mt\/d Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-96mt\/d Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-96mt\/d Search vendor "Mitsubishielectric" for product "Fx5uc-96mt\/d" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-96mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-96mt\/dss Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc-96mt\/dss Search vendor "Mitsubishielectric" for product "Fx5uc-96mt\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mr\/es Search vendor "Mitsubishielectric" for product "Fx5uj-24mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mr\/es-a Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mr\/es-a Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mr\/es-a Search vendor "Mitsubishielectric" for product "Fx5uj-24mr\/es-a" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mt\/es Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mt\/es-a Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/es-a Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mt\/es-a Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/es-a" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-24mt\/ess Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mr\/es Search vendor "Mitsubishielectric" for product "Fx5uj-40mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mr\/es-a Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mr\/es-a Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mr\/es-a Search vendor "Mitsubishielectric" for product "Fx5uj-40mr\/es-a" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mt\/es Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mt\/es-a Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/es-a Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mt\/es-a Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/es-a" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-40mt\/ess Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mr\/es Search vendor "Mitsubishielectric" for product "Fx5uj-60mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mr\/es-a Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mr\/es-a Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mr\/es-a Search vendor "Mitsubishielectric" for product "Fx5uj-60mr\/es-a" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mt\/es Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mt\/es-a Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/es-a Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mt\/es-a Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/es-a" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj-60mt\/ess Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-30mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-30mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-30mr\/es Search vendor "Mitsubishielectric" for product "Fx5s-30mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-30mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-30mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-30mt\/es Search vendor "Mitsubishielectric" for product "Fx5s-30mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-30mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5s-30mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-30mt\/ess Search vendor "Mitsubishielectric" for product "Fx5s-30mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-40mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-40mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-40mr\/es Search vendor "Mitsubishielectric" for product "Fx5s-40mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-40mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-40mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-40mt\/es Search vendor "Mitsubishielectric" for product "Fx5s-40mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-40mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5s-40mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-40mt\/ess Search vendor "Mitsubishielectric" for product "Fx5s-40mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-60mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-60mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-60mr\/es Search vendor "Mitsubishielectric" for product "Fx5s-60mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-60mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-60mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-60mt\/es Search vendor "Mitsubishielectric" for product "Fx5s-60mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-60mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5s-60mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-60mt\/ess Search vendor "Mitsubishielectric" for product "Fx5s-60mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-80mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-80mr\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-80mr\/es Search vendor "Mitsubishielectric" for product "Fx5s-80mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-80mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5s-80mt\/es Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-80mt\/es Search vendor "Mitsubishielectric" for product "Fx5s-80mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-80mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5s-80mt\/ess Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5s-80mt\/ess Search vendor "Mitsubishielectric" for product "Fx5s-80mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5-enet Firmware Search vendor "Mitsubishielectric" for product "Fx5-enet Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5-enet Search vendor "Mitsubishielectric" for product "Fx5-enet" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5-enet\/ip Firmware Search vendor "Mitsubishielectric" for product "Fx5-enet\/ip Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5-enet\/ip Search vendor "Mitsubishielectric" for product "Fx5-enet\/ip" | - | - |
Safe
|