What’s Vulnerable › Vulnerabilities

CVE-2022-33323: Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-02 · updated 2026-06-17
• Weakness: CWE-489

Description

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Affected products

• Mitsubishielectric Rh-12Fh55 Firmware: all versions
• Mitsubishielectric Rh-12Fh70 Firmware: all versions
• Mitsubishielectric Rh-12Fh85 Firmware: all versions
• Mitsubishielectric Rh-12Sdh55 Firmware: all versions
• Mitsubishielectric Rh-12Sdh70 Firmware: all versions
• Mitsubishielectric Rh-12Sdh85 Firmware: all versions
• Mitsubishielectric Rh-12Sqh55 Firmware: all versions
• Mitsubishielectric Rh-12Sqh70 Firmware: all versions
• Mitsubishielectric Rh-12Sqh85 Firmware: all versions
• Mitsubishielectric Rh-20Fh100 Firmware: all versions
• Mitsubishielectric Rh-20Fh85 Firmware: all versions
• Mitsubishielectric Rh-20Sdh100 Firmware: all versions
• Mitsubishielectric Rh-20Sdh85 Firmware: all versions
• Mitsubishielectric Rh-20Sqh85 Firmware: all versions
• Mitsubishielectric Rh-3Fh35 Firmware: all versions
• Mitsubishielectric Rh-3Fh45 Firmware: all versions
• Mitsubishielectric Rh-3Fh55 Firmware: all versions
• Mitsubishielectric Rh-3Sdhr Firmware: all versions
• Mitsubishielectric Rh-3Sqhr Firmware: all versions
• Mitsubishielectric Rh-6Fh35 Firmware: all versions
• Mitsubishielectric Rh-6Fh45 Firmware: all versions
• Mitsubishielectric Rh-6Fh55 Firmware: all versions
• Mitsubishielectric Rh-6Sdh35 Firmware: all versions
• Mitsubishielectric Rh-6Sdh45 Firmware: all versions
• Mitsubishielectric Rh-6Sdh55 Firmware: all versions
• Mitsubishielectric Rh-6Sqh35 Firmware: all versions
• Mitsubishielectric Rh-6Sqh45 Firmware: all versions
• Mitsubishielectric Rh-6Sqh55 Firmware: all versions
• Mitsubishielectric Rv-12Sd Firmware: all versions
• Mitsubishielectric Rv-12Sdl Firmware: all versions

References

• https://jvn.jp/vu/JVNVU94588481/index.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf
• https://jvn.jp/vu/JVNVU94588481/index.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf

Get alerted when CVE-2022-33323 or the next vulnerability affects your stack