Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C)
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to connect to the module via FTP and bypass authentication to log in.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-2063US | high7.3 | — | ||
Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Ser… | ||||
| CVE-2023-2062US | medium6.2 | — | ||
Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticat… | ||||
| CVE-2023-2061US | high7.5OT elevated | — | ||
Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP modul… | ||||
| CVE-2023-2060US | high7.5 | — | ||
Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP modul… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-157-02 JSONself
- ICSA Advisory ICSA-23-157-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (16)
- MitigationFX5-ENET/IP
Allow only trusted users to log in or remotely log in.
- MitigationFX5-ENET/IP
Allow only trusted users to log in or remotely log in.
- MitigationFX5-ENET/IP
Allow only trusted users to log in or remotely log in.
- MitigationRJ71EIP91
Allow only trusted users to log in or remotely log in.
- MitigationRJ71EIP91
Allow only trusted users to log in or remotely log in.
- MitigationRJ71EIP91
Allow only trusted users to log in or remotely log in.
- MitigationSW1DNN-EIPCT-BD
Allow only trusted users to log in or remotely log in.
- MitigationSW1DNN-EIPCTFX5-BD
Allow only trusted users to log in or remotely log in.
- FixedFX5-ENET/IP
FX5-ENET/IP firmware version "1.106" or later: The FTP function can be disabled. To prevent unauthorized access from outside, set the connection to "Deny connection" in the EtherNet/IP Configuration Tool for FX5-ENET/IP Tool connection setting change function and disable the module's FTP function, except when configuring with the EtherNet/IP Configuration Tool for FX5-ENET/IP. For detailed configuration instructions, refer to the following manuals: "Tool connection setting change function" in the "Details of buffer memory addresses" in the "Appendix 4 Buffer Memory" in the "MELSEC iQ-F FX5 EtherNet/IP Module User's Manual."
- FixedFX5-ENET/IP
FX5-ENET/IP firmware version "1.106" or later: The FTP function can be disabled. To prevent unauthorized access from outside, set the connection to "Deny connection" in the EtherNet/IP Configuration Tool for FX5-ENET/IP Tool connection setting change function and disable the module's FTP function, except when configuring with the EtherNet/IP Configuration Tool for FX5-ENET/IP. For detailed configuration instructions, refer to the following manuals: "Tool connection setting change function" in the "Details of buffer memory addresses" in the "Appendix 4 Buffer Memory" in the "MELSEC iQ-F FX5 EtherNet/IP Module User's Manual."
- FixedFX5-ENET/IP
FX5-ENET/IP firmware version "1.106" or later: The FTP function can be disabled. To prevent unauthorized access from outside, set the connection to "Deny connection" in the EtherNet/IP Configuration Tool for FX5-ENET/IP Tool connection setting change function and disable the module's FTP function, except when configuring with the EtherNet/IP Configuration Tool for FX5-ENET/IP. For detailed configuration instructions, refer to the following manuals: "Tool connection setting change function" in the "Details of buffer memory addresses" in the "Appendix 4 Buffer Memory" in the "MELSEC iQ-F FX5 EtherNet/IP Module User's Manual."
- FixedRJ71EIP91
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting these vulnerabilities common to RJ71EIP91 and FX5-ENET/IP:
- FixedRJ71EIP91
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting these vulnerabilities common to RJ71EIP91 and FX5-ENET/IP:
- FixedRJ71EIP91
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting these vulnerabilities common to RJ71EIP91 and FX5-ENET/IP:
- FixedSW1DNN-EIPCT-BD
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploitation of these vulnerabilities common to SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD:
- FixedSW1DNN-EIPCTFX5-BD
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploitation of these vulnerabilities common to SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan