What’s Vulnerable › Vulnerabilities

CVE-2023-4562: Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-13 · updated 2026-06-17
• Weakness: CWE-287

Description

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.

Affected products

• Mitsubishielectric Fx3G-14 Mr/Ds Firmware: all versions
• Mitsubishielectric Fx3G-14 Mr/Es Firmware: all versions
• Mitsubishielectric Fx3G-14 Mt/Ds Firmware: all versions
• Mitsubishielectric Fx3G-14 Mt/Dss Firmware: all versions
• Mitsubishielectric Fx3G-14 Mt/Es Firmware: all versions
• Mitsubishielectric Fx3G-14 Mt/Ess Firmware: all versions
• Mitsubishielectric Fx3G-14Mr/Ds Firmware: all versions
• Mitsubishielectric Fx3G-14Mr/Es-A Firmware: all versions
• Mitsubishielectric Fx3G-14Mr/Es Firmware: all versions
• Mitsubishielectric Fx3G-14Mt/Ds Firmware: all versions
• Mitsubishielectric Fx3G-14Mt/Dss Firmware: all versions
• Mitsubishielectric Fx3G-14Mt/Es-A Firmware: all versions
• Mitsubishielectric Fx3G-14Mt/Es Firmware: all versions
• Mitsubishielectric Fx3G-14Mt/Ess Firmware: all versions
• Mitsubishielectric Fx3G-232Adp(-Mb) Firmware: all versions
• Mitsubishielectric Fx3G-24 Mr/Ds Firmware: all versions
• Mitsubishielectric Fx3G-24 Mr/Es Firmware: all versions
• Mitsubishielectric Fx3G-24 Mt/Ds Firmware: all versions
• Mitsubishielectric Fx3G-24 Mt/Dss Firmware: all versions
• Mitsubishielectric Fx3G-24 Mt/Es Firmware: all versions
• Mitsubishielectric Fx3G-24 Mt/Ess Firmware: all versions
• Mitsubishielectric Fx3G-24Mr/Ds Firmware: all versions
• Mitsubishielectric Fx3G-24Mr/Es-A Firmware: all versions
• Mitsubishielectric Fx3G-24Mr/Es Firmware: all versions
• Mitsubishielectric Fx3G-24Mt/Ds Firmware: all versions
• Mitsubishielectric Fx3G-24Mt/Dss Firmware: all versions
• Mitsubishielectric Fx3G-24Mt/Es-A Firmware: all versions
• Mitsubishielectric Fx3G-24Mt/Es Firmware: all versions
• Mitsubishielectric Fx3G-24Mt/Ess Firmware: all versions
• Mitsubishielectric Fx3G-32 Mt/Dss Firmware: all versions

References

• https://jvn.jp/vu/JVNVU90509290/
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-13
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-012_en.pdf
• https://jvn.jp/vu/JVNVU90509290/
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-13
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-012_en.pdf

Get alerted when CVE-2023-4562 or the next vulnerability affects your stack