7.5
High
CVE-2023-2846 Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules…
Description
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC-F Series FX3U-16MR/ES | Versions not published | |
| MELSEC-F Series FX3U-16MT/ES | Versions not published | |
| MELSEC-F Series FX3U-16MT/ESS | Versions not published | |
| MELSEC-F Series FX3U-32MR/ES | Versions not published | |
| MELSEC-F Series FX3U-32MT/ES | Versions not published | |
| MELSEC-F Series FX3U-32MT/ESS | Versions not published | |
| MELSEC-F Series FX3U-48MR/ES | Versions not published | |
| MELSEC-F Series FX3U-48MT/ES | Versions not published | |
| MELSEC-F Series FX3U-48MT/ESS | Versions not published |