Mitsubishi Electric MELSEC iQ-F Series Plaintext Storage of a Password (CVE-2023-0457)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(500885);
  script_version("1.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/11/27");

  script_cve_id("CVE-2023-0457");
  script_xref(name:"ICSA", value:"23-061-01");

  script_name(english:"Mitsubishi Electric MELSEC iQ-F Series Plaintext Storage of a Password (CVE-2023-0457)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Plaintext Storage of a Password vulnerability in Mitsubishi Electric
Corporation MELSEC iQ-F Series FX5U(C) CPU modules all models all
versions, FX5UJ CPU modules all models all versions, FX5S CPU modules
all models all versions, FX5-ENET all versions and FX5-ENET/IP all
versions allows a remote unauthenticated attacker to disclose
plaintext credentials stored in project files and login into FTP
server or Web server.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://jvn.jp/vu/JVNVU93891523/index.html");
  script_set_attribute(attribute:"see_also", value:"https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01");
  # https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?855c2f80");
  script_set_attribute(attribute:"solution", value:
'The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original
can be found at CISA.gov.

Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting
this vulnerability:

- Encrypt the communication data or project files when sending and receiving or sharing these files.
- Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required.
- Use within a LAN and block access from untrusted networks and hosts through firewalls.

- Restrict physical access to affected products.
- For MELSEC iQ-F or iQ-R series, use an IP filter function to block access from untrusted hosts.

For details on the IP filter function, please refer to the following manuals for each product;

"12.1 IP Filter Function" in the MELSEC iQ-F FX5 User\'s Manual (Ethernet Communication)

"1.13 Security" - "IP filter" in the MELSEC iQ-R Ethernet User’s Manual (Application).

For specific update instructions and additional details see the Mitsubishi Electric advisory.');
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-0457");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(522);

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/03/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/03/03");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/03/20");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5-enet%2fip_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5-enet_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-30mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-30mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-30mt%2fess_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-40mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-40mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-40mt%2fess_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-60mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-60mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-60mt%2fess_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-80mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-80mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5s-80mt%2fess_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-32mr%2fds-ts_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-32mt%2fd_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-32mt%2fds-ts_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-32mt%2fdss-ts_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-32mt%2fdss_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-64mt%2fd_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-64mt%2fdss_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-96mt%2fd_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uc-96mt%2fdss_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-24mr%2fes-a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-24mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-24mt%2fes-a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-24mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-24mt%2fess_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-40mr%2fes-a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-40mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-40mt%2fes-a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-40mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-40mt%2fess_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-60mr%2fes-a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-60mr%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-60mt%2fes-a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-60mt%2fes_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx5uj-60mt%2fess_firmware");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Mitsubishi");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Mitsubishi');

var asset = tenable_ot::assets::get(vendor:'Mitsubishi');

var vuln_cpes = {
    "cpe:/o:mitsubishielectric:fx5uc-32mr%2fds-ts_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-32mt%2fd_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-32mt%2fdss_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-32mt%2fdss-ts_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-32mt%2fds-ts_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-64mt%2fd_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-64mt%2fdss_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-96mt%2fd_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uc-96mt%2fdss_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-24mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-24mr%2fes-a_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-24mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-24mt%2fes-a_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-24mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-40mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-40mr%2fes-a_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-40mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-40mt%2fes-a_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-40mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-60mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-60mr%2fes-a_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-60mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-60mt%2fes-a_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5uj-60mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-30mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-30mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-30mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-40mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-40mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-40mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-60mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-60mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-60mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-80mr%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-80mt%2fes_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5s-80mt%2fess_firmware" :
        {"family" : "MELSECiQF"},
    "cpe:/o:mitsubishielectric:fx5-enet_firmware:-" :
        {"family" : "MELSECiQFCP"},
    "cpe:/o:mitsubishielectric:fx5-enet%2fip_firmware:-" :
        {"family" : "MELSECiQFCP"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);