CVE-2023-0525

🗓️ 03 Aug 2023 23:42:43Reported by MitsubishiType

Weak Encoding for Password in Mitsubishi Electric GOT2000 Series allows remote attackers to decrypt passwords.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Data Transfer Security Privilege Escalation	7 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-0525	4 Aug 202307:45	–	circl
CNNVD	Mitsubishi Electric GOT2000 encryption issue vulnerability	12 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-0525	3 Aug 202323:42	–	cvelist
EUVD	EUVD-2023-12570	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric GT and GOT Series Products	3 Aug 202306:00	–	ics
NVD	CVE-2023-0525	4 Aug 202300:15	–	nvd
osv_cve	CVE-2023-0525	4 Aug 202300:15	–	osv_cve
Prion	Design/Logic Flaw	4 Aug 202300:15	–	prion
Positive Technologies	PT-2023-16331 · Mitsubishi · Got Simple Series Gs25 +7	3 Aug 202300:00	–	ptsecurity

NVD

Node

mitsubishielectric gt_designer3Range<1.300n

mitsubishielectric gt_softgot2000Range<1.300n

Node

AND

mitsubishielectric gt27_firmwareRange<01.50.000

mitsubishielectric gt27Match-

Node

AND

mitsubishielectric gt25_firmwareRange<01.50.000

mitsubishielectric gt25Match-

Node

AND

mitsubishielectric gt23_firmwareRange<01.50.000

mitsubishielectric gt23Match-

Node

AND

mitsubishielectric gt21_firmwareRange<01.50.000

mitsubishielectric gt21Match-

Node

AND

mitsubishielectric gs25_firmwareRange<01.50.000

mitsubishielectric gs25Match-

Node

AND

mitsubishielectric gs21_firmwareRange<01.50.000

mitsubishielectric gs21Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT27 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.49.000 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT25 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.49.000 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT23 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.49.000 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT21 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.49.000 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT SIMPLE Series GS25 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.49.000 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT SIMPLE Series GS21 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.49.000 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT Designer3 Version1 (GOT2000)",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "1.295H and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT SoftGOT2000",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "1.295H and prior"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-215-02
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-008_en.pdf
jvn	www.jvn.jp/vu/JVNVU95285923/index.html

17 Jun 2026 05:25Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00682

SSVC