← Database

CVE-2023-0457

HIGH CVSS: 7.5 Published: 2023-03-03 Modified: 2026-06-17

Description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Affected Platforms

Mitsubishielectric Fx5Uj-40Mt\/Es-AMitsubishielectric Fx5Uc-32Mt\/DMitsubishielectric Fx5Uc-32Mt\/D FirmwareMitsubishielectric Fx5Uj-60Mr\/EsMitsubishielectric Fx5Uc-96Mt\/DMitsubishielectric Fx5S-30Mr\/Es FirmwareMitsubishielectric Fx5Uj-60Mt\/Es-AMitsubishielectric Fx5Uc-64Mt\/DssMitsubishielectric Fx5S-80Mt\/Ess FirmwareMitsubishielectric Fx5S-80Mt\/Es

Weakness Type

CWE-256, CWE-522

References