CVE-2023-2846

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Score
CVSS 3.1 9.1 Critical
Status
Modified - Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
Published
2023-06-30
Last modified
2025-03-05
Weaknesses
CWE-294

Affected products

References

 
 
© AVABIS GmbH privacypolicy about