CVE-2023-0457

Published: Mar 3, 2023

Modified: Mar 5, 2025

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Vendor	Product	Versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/D	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/D	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/D	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DS-TS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS-TS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MR/DS-TS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5-ENET	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5-ENET/IP	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R00CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R01CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R02CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04ENCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08ENCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16ENCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32ENCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120ENCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08SFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16SFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32SFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120SFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08PCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16PCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32PCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120PCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08PSFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16PSFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32PSFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120PSFCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series RJ71EN71	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R12CCPU-V	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q03UDECPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q04UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q06UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q10UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q13UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q20UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q26UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q50UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q100UDEHCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q03UDVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q04UDVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q06UDVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q13UDVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q26UDVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q04UDPVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q06UDPVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q13UDPVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series Q26UDPVCPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-Q Series QJ71E71-100	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L02CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L06CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L26CPU	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L02CPU-P	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L06CPU-P	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L26CPU-P	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L26CPU-BT	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series L26CPU-PBT	affected `all versions`
Mitsubishi Electric Corporation	MELSEC-L Series LJ71E71-100	affected `all versions`

Weaknesses (CWE)

CWE-256

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf

https://jvn.jp/vu/JVNVU93891523/index.html

https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-0457

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References