Mitsubishi Electric Various Products Access Control Error Vulnerability

🗓️ 30 Jan 2024 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Mitsubishi Electric access control flaw lets remote attackers bypass authentication via crafted packets.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerabilities of Mitsubishi Electric’s software products, including EZSocket, FR Configurator2, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, and MX OPC Server DA/UA (software included with MC Works64), are related to the absence of authentication for critical functions. This allows attackers to gain unauthorized access to confidential information.	6 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-6942	30 Jan 202410:31	–	circl
CVE	CVE-2023-6942	30 Jan 202409:06	–	cve
Cvelist	CVE-2023-6942	30 Jan 202409:06	–	cvelist
EUVD	EUVD-2023-59139	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Engineering Software Products (Update D)	30 Jan 202407:00	–	ics
NVD	CVE-2023-6942	30 Jan 202409:15	–	nvd
Prion	Authentication flaw	30 Jan 202409:15	–	prion
Positive Technologies	PT-2024-1480 · Mitsubishi · Gx Works3 +8	30 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-6942	13 Feb 202509:20	–	redhatcve

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-030-02
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-020_en.pdf
jvn	www.jvn.jp/vu/JVNVU95103362
cxsecurity	www.cxsecurity.com/cveshow/CVE-2023-6942/

15 Jan 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00444

SSVC

Mitsubishi Electric access control flaw remote attackers authentication bypass