Lucene search

K
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.TENABLE_OT_MITSUBISHI_CVE-2023-2846.NASL
HistoryAug 07, 2023 - 12:00 a.m.

Mitsubishi Electric MELSEC-F Series Authentication Bypass By Capture-Replay (CVE-2023-2846)

2023-08-0700:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
4
authentication bypass
mitsubishi electric
capture-replay
vulnerability
remote
unauthenticated
tenable.ot
cisa
mitigation
firewall
vpn
lan
physical access

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(501598);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/04");

  script_cve_id("CVE-2023-2846");

  script_name(english:"Mitsubishi Electric MELSEC-F Series Authentication Bypass By Capture-Replay (CVE-2023-2846)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Authentication Bypass by Capture-replay vulnerability in Mitsubishi
Electric Corporation MELSEC-F Series main modules allows a remote
unauthenticated attacker to cancel the password/keyword setting and
login to the affected products by sending specially crafted packets.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e2e9705e");
  script_set_attribute(attribute:"see_also", value:"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04");
  script_set_attribute(attribute:"see_also", value:"https://jvn.jp/vu/JVNVU94519952");
  script_set_attribute(attribute:"solution", value:
"The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original
can be found at CISA.gov.

​​Mitsubishi Electric recommends customers take the following mitigation measures to minimize the risk of an attacker
exploiting this vulnerability:

- ​Use a firewall or virtual private network (VPN), etc., to prevent unauthorized access when internet access is
required.
- ​Use within a LAN and block access from untrusted networks and hosts through firewalls.
- ​Restrict physical access to affected products and the LAN they connect.

​For specific update instructions and additional details, see the Mitsubishi Electric advisory.

​");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-2846");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(294);

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/06/30");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/06/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/08/07");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-14mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-24mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-40mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3g-60mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ga-24mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ga-24mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ga-40mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ga-40mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ga-60mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ga-60mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3gc-32mt%2fd_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3gc-32mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-24mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-24mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-24mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-24mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-24mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-24mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-40mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-40mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-40mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-40mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-40mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3ge-40mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-10mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-10mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-10mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-10mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-10mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-10mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-14mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-14mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-14mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-14mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-14mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-14mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-20mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-20mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-20mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-20mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-20mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-20mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mr%2fes-2ad_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mt%2fes-2ad_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mt%2fess-2ad_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3s-30mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-10mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-10mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-14mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-14mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-20mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-20mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-30mr-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3sa-30mt-cm_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-128mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-128mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-128mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-128mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-128mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-16mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mr%2fua1_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32ms%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-32mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-48mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mr%2fua1_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64ms%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-64mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mr%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mr%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mr%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mt%2fds_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mt%2fes-a_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mt%2fes_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3u-80mt%2fess_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-16mr%2fd-t_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-16mr%2fds-t_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-16mt%2fd-p4_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-16mt%2fd_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-16mt%2fdss-p4_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-16mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-32mt%2fd_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-32mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-32mt-lt-2_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-32mt-lt_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-64mt%2fd_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-64mt%2fdss_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-96mt%2fd_firmware:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mitsubishielectric:fx3uc-96mt%2fdss_firmware:-");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Mitsubishi");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Mitsubishi');

var asset = tenable_ot::assets::get(vendor:'Mitsubishi');

var vuln_cpes = {
    "cpe:/o:mitsubishielectric:fx3u-16mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-128mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-128mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-128mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mr%2fua1_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mr%2fua1_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32ms%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64ms%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-16mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-32mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-48mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-64mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-80mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-128mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3u-128mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-16mt%2fd_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-32mt%2fd_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-64mt%2fd_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-96mt%2fd_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-16mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-32mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-64mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-96mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-16mr%2fd-t_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-16mr%2fds-t_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-32mt-lt_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-32mt-lt-2_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-16mt%2fd-p4_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3uc-16mt%2fdss-p4_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-14mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-24mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-40mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mr%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3g-60mt%2fes-a_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3gc-32mt%2fd_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3gc-32mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-24mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-24mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-24mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-40mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-40mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-40mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-24mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-24mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-24mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-40mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-40mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ge-40mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ga-24mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ga-24mt-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ga-40mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ga-40mt-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ga-60mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3ga-60mt-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-10mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-10mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-10mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-10mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-10mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-10mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-14mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-14mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-14mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-14mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-14mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-14mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-20mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-20mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-20mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-20mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-20mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-20mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mr%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mr%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mt%2fds_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mt%2fdss_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mt%2fes_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mt%2fess_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mr%2fes-2ad_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mt%2fes-2ad_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3s-30mt%2fess-2ad_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-10mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-10mt-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-14mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-14mt-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-20mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-20mt-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-30mr-cm_firmware:-" :
        {"family" : "MELSECF"},
    "cpe:/o:mitsubishielectric:fx3sa-30mt-cm_firmware:-" :
        {"family" : "MELSECF"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);
VendorProductVersionCPE
mitsubishielectricfx3g-14mr%2fds_firmware-cpe:/o:mitsubishielectric:fx3g-14mr%2fds_firmware:-
mitsubishielectricfx3g-14mr%2fes-a_firmware-cpe:/o:mitsubishielectric:fx3g-14mr%2fes-a_firmware:-
mitsubishielectricfx3g-14mr%2fes_firmware-cpe:/o:mitsubishielectric:fx3g-14mr%2fes_firmware:-
mitsubishielectricfx3g-14mt%2fds_firmware-cpe:/o:mitsubishielectric:fx3g-14mt%2fds_firmware:-
mitsubishielectricfx3g-14mt%2fdss_firmware-cpe:/o:mitsubishielectric:fx3g-14mt%2fdss_firmware:-
mitsubishielectricfx3g-14mt%2fes-a_firmware-cpe:/o:mitsubishielectric:fx3g-14mt%2fes-a_firmware:-
mitsubishielectricfx3g-14mt%2fes_firmware-cpe:/o:mitsubishielectric:fx3g-14mt%2fes_firmware:-
mitsubishielectricfx3g-14mt%2fess_firmware-cpe:/o:mitsubishielectric:fx3g-14mt%2fess_firmware:-
mitsubishielectricfx3g-24mr%2fds_firmware-cpe:/o:mitsubishielectric:fx3g-24mr%2fds_firmware:-
mitsubishielectricfx3g-24mr%2fes-a_firmware-cpe:/o:mitsubishielectric:fx3g-24mr%2fes-a_firmware:-
Rows per page:
1-10 of 1501

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

Related for TENABLE_OT_MITSUBISHI_CVE-2023-2846.NASL