CVE-2023-2846

CVSS V2 None CVSS V3 None
Description
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.
Overview
  • CVE ID
  • CVE-2023-2846
  • Assigner
  • Mitsubishi
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-06-30T04:05:26.423Z
  • Last Modified Date
  • 2023-06-30T04:05:26.423Z
Weakness Enumerations
CWE URL
CWE-294 http://cwe.mitre.org/data/definitions/294.html
References
Reference URL Reference Tags
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf
https://jvn.jp/vu/JVNVU94519952
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-2846
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2846
History
Created Old Value New Value Data Type Notes
2024-06-24 21:53:20 Added to TrackCVE