Lucene search

MitsubishiCVELIST:CVE-2023-2062

HistoryJun 02, 2023 - 4:04 a.m.

CVE-2023-2062 Information Disclosure vulnerability in EtherNet/IP Configuration tools

2023-06-0204:04:28

CWE-549

Mitsubishi

www.cve.org

ethernet/ip

configuration tools

vulnerability

mitsubishi electric corporation

authentication bypass

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

31.1%

JSON

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "EtherNet/IP Configuration tool for RJ71EIP91 SW1DNN-EIPCT-BD",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Software version \"1.01B\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EtherNet/IP Configuration tool for FX5-ENET/IP SW1DNN-EIPCTFX5-BD",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

References

jvn.jp/vu/JVNVU92908006

www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

31.1%

JSON

Related for CVELIST:CVE-2023-2062