Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2023-2061

Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mitsubishi

Description

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91

Default version status: unaffected

  • all versionsaffected

Mitsubishi Electric Corporation MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP

Default version status: unaffected

  • all versionsaffected

References