Skip to content
Sign in
6.5 Medium

CVE-2023-6815 Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU…

Description

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet.

Affected products and versions

Product Affected versions Fixed in
MELSEC iQ-R Series Safety CPU R08SFCPU Versions not published
MELSEC iQ-R Series Safety CPU R16SFCPU Versions not published
MELSEC iQ-R Series Safety CPU R32SFCPU Versions not published
MELSEC iQ-R Series Safety CPU R120SFCPU Versions not published
MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU Versions not published
MELSEC iQ-R Series SIL2 Process CPU R16PSFCPU Versions not published
MELSEC iQ-R Series SIL2 Process CPU R32PSFCPU Versions not published
MELSEC iQ-R Series SIL2 Process CPU R120PSFCPU Versions not published

Other CVEs of MELSEC iQ-R Series Safety CPU R08SFCPU

The 2 CVEs of MELSEC iQ-R Series Safety CPU R08SFCPU →
CVE-2021-20599 Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC… 9.1 Critical
Track this CVE