Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.






Advisories
Source ID Title
EUVD EUVD EUVD-2023-54417 Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 04 Mar 2025 03:45:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Mitsubishi

Published:

Updated: 2025-02-27T20:41:33.964Z

Reserved: 2023-08-28T01:49:36.225Z

Link: CVE-2023-4562

cve-icon Vulnrichment

Updated: 2024-08-02T07:31:06.356Z

cve-icon NVD

Status : Modified

Published: 2023-10-13T02:15:09.917

Modified: 2024-11-21T08:35:25.693

Link: CVE-2023-4562

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.