Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow an unauthenticated malicious actor to login to a file transfer protocol (FTP) server or web server by obtaining plaintext credentials stored in project files.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0457US | high7.5 | — | ||
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthe… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-061-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-061-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- BehobenAll models FX5S CPU modules
Encrypt the communication data or project files when sending and receiving or sharing these files.
- BehobenAll models of FX5U(C) CPU modules
Encrypt the communication data or project files when sending and receiving or sharing these files.
- BehobenAll models of FX5UJ CPU modules
Encrypt the communication data or project files when sending and receiving or sharing these files.
- BehobenFX5-ENET
Encrypt the communication data or project files when sending and receiving or sharing these files.
- BehobenFX5-ENET/IP
Encrypt the communication data or project files when sending and receiving or sharing these files.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan