Severity
High
Analysis Summary
CVE-2023-2846
Mitsubishi Electric MELSEC-F Series could allow a remote attacker to bypass security restrictions, caused by authentication bypass by capture-replay in the main modules. By sending specially crafted packets, an attacker could exploit this vulnerability to log in to the product.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2023-2846
Affected Vendors
Mitsubishi Electric
Affected Products
- Mitsubishi Electric FX3U-xMy/z
- Mitsubishi Electric FX3U-32MR/UA1
- Mitsubishi Electric FX3U-64MR/UA1
Remediation
Refer to Mitsubishi Electric Security Advisory for patch, upgrade or suggested workaround information.