What’s Vulnerable › Vulnerabilities
CVE-2023-0457: Information Disclosure Vulnerability in MELSEC Series
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-03-03 · updated 2026-06-17
- Weakness: CWE-256
Description
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
Affected products
- Mitsubishielectric Fx5-Enet/Ip Firmware: all versions
- Mitsubishielectric Fx5-Enet Firmware: all versions
- Mitsubishielectric Fx5S-30Mr/Es Firmware: all versions
- Mitsubishielectric Fx5S-30Mt/Es Firmware: all versions
- Mitsubishielectric Fx5S-30Mt/Ess Firmware: all versions
- Mitsubishielectric Fx5S-40Mr/Es Firmware: all versions
- Mitsubishielectric Fx5S-40Mt/Es Firmware: all versions
- Mitsubishielectric Fx5S-40Mt/Ess Firmware: all versions
- Mitsubishielectric Fx5S-60Mr/Es Firmware: all versions
- Mitsubishielectric Fx5S-60Mt/Es Firmware: all versions
- Mitsubishielectric Fx5S-60Mt/Ess Firmware: all versions
- Mitsubishielectric Fx5S-80Mr/Es Firmware: all versions
- Mitsubishielectric Fx5S-80Mt/Es Firmware: all versions
- Mitsubishielectric Fx5S-80Mt/Ess Firmware: all versions
- Mitsubishielectric Fx5Uc-32Mr/Ds-Ts Firmware: all versions
- Mitsubishielectric Fx5Uc-32Mt/D Firmware: all versions
- Mitsubishielectric Fx5Uc-32Mt/Ds-Ts Firmware: all versions
- Mitsubishielectric Fx5Uc-32Mt/Dss-Ts Firmware: all versions
- Mitsubishielectric Fx5Uc-32Mt/Dss Firmware: all versions
- Mitsubishielectric Fx5Uc-64Mt/D Firmware: all versions
- Mitsubishielectric Fx5Uc-64Mt/Dss Firmware: all versions
- Mitsubishielectric Fx5Uc-96Mt/D Firmware: all versions
- Mitsubishielectric Fx5Uc-96Mt/Dss Firmware: all versions
- Mitsubishielectric Fx5Uj-24Mr/Es-A Firmware: all versions
- Mitsubishielectric Fx5Uj-24Mr/Es Firmware: all versions
- Mitsubishielectric Fx5Uj-24Mt/Es-A Firmware: all versions
- Mitsubishielectric Fx5Uj-24Mt/Es Firmware: all versions
- Mitsubishielectric Fx5Uj-24Mt/Ess Firmware: all versions
- Mitsubishielectric Fx5Uj-40Mr/Es-A Firmware: all versions
- Mitsubishielectric Fx5Uj-40Mr/Es Firmware: all versions
References
- https://jvn.jp/vu/JVNVU93891523/index.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf
- https://jvn.jp/vu/JVNVU93891523/index.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf
Get alerted when CVE-2023-0457 or the next vulnerability affects your stack