Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow an unauthenticated malicious actor to login to a file transfer protocol (FTP) server or web server by obtaining plaintext credentials stored in project files.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0457US | high7.5 | — | ||
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthe… | ||||
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-061-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-061-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- FixedAll models FX5S CPU modules
Encrypt the communication data or project files when sending and receiving or sharing these files.
- FixedAll models of FX5U(C) CPU modules
Encrypt the communication data or project files when sending and receiving or sharing these files.
- FixedAll models of FX5UJ CPU modules
Encrypt the communication data or project files when sending and receiving or sharing these files.
- FixedFX5-ENET
Encrypt the communication data or project files when sending and receiving or sharing these files.
- FixedFX5-ENET/IP
Encrypt the communication data or project files when sending and receiving or sharing these files.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan