Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2062
HistoryJun 02, 2023 - 5:15 a.m.

Authentication flaw

2023-06-0205:15:00
PRIOn knowledge base
www.prio-n.com
3
authentication flaw
mitsubishi electric
ethernet/ip
remote access
unauthenticated
melsec iq-r
melsec iq-f
ftp

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Related for PRION:CVE-2023-2062