ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-4562

—
CVSS 3.1
9.1 critical
EPSS
<1%p56
Published
()
Modified
Description

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.

Vendors
mitsubishielectric
Products
fx3g-14 mr\/ds firmware, fx3g-14 mr\/es firmware, fx3g-14 mt\/ds firmware, fx3g-14 mt\/dss firmware, fx3g-14 mt\/es firmware, fx3g-14 mt\/ess firmware, fx3g-14mr\/ds firmware, fx3g-14mr\/es firmware, fx3g-14mr\/es-a firmware, fx3g-14mt\/ds firmware, fx3g-14mt\/dss firmware, fx3g-14mt\/es firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

No ingested article mentions this CVE yet.