CVE-2023-0457

Published: Mar 3, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Affected (38)

Products: Mitsubishielectric: Fx5uc 32mr/ds Ts Firmware, Fx5uc 32mt/d Firmware, Fx5uc 32mt/dss Firmware, Fx5uc 32mt/dss Ts Firmware, Fx5uc 32mt/ds Ts Firmware, Fx5uc 64mt/d Firmware, Fx5uc 64mt/dss Firmware, Fx5uc 96mt/d Firmware, Fx5uc 96mt/dss Firmware, Fx5uj 24mr/es Firmware, Fx5uj 24mr/es A Firmware, Fx5uj 24mt/es Firmware, Fx5uj 24mt/es A Firmware, Fx5uj 24mt/ess Firmware, Fx5uj 40mr/es Firmware, Fx5uj 40mr/es A Firmware, Fx5uj 40mt/es Firmware, Fx5uj 40mt/es A Firmware, Fx5uj 40mt/ess Firmware, Fx5uj 60mr/es Firmware, Fx5uj 60mr/es A Firmware, Fx5uj 60mt/es Firmware, Fx5uj 60mt/es A Firmware, Fx5uj 60mt/ess Firmware, Fx5s 30mr/es Firmware, Fx5s 30mt/es Firmware, Fx5s 30mt/ess Firmware, Fx5s 40mr/es Firmware, Fx5s 40mt/es Firmware, Fx5s 40mt/ess Firmware, Fx5s 60mr/es Firmware, Fx5s 60mt/es Firmware, Fx5s 60mt/ess Firmware, Fx5s 80mr/es Firmware, Fx5s 80mt/es Firmware, Fx5s 80mt/ess Firmware, Fx5 Enet Firmware, Fx5 Enet/ip Firmware

Mitsubishielectric

38 products

Fx5uc 32mr/ds Ts Firmware

Fx5uc 32mt/d Firmware

Fx5uc 32mt/dss Firmware

Fx5uc 32mt/dss Ts Firmware

Fx5uc 32mt/ds Ts Firmware

Fx5uc 64mt/d Firmware

Fx5uc 64mt/dss Firmware

Fx5uc 96mt/d Firmware

Fx5uc 96mt/dss Firmware

Fx5uj 24mr/es Firmware

Fx5uj 24mr/es A Firmware

Fx5uj 24mt/es Firmware

Fx5uj 24mt/es A Firmware

Fx5uj 24mt/ess Firmware

Fx5uj 40mr/es Firmware

Fx5uj 40mr/es A Firmware

Fx5uj 40mt/es Firmware

Fx5uj 40mt/es A Firmware

Fx5uj 40mt/ess Firmware

Fx5uj 60mr/es Firmware

Fx5uj 60mr/es A Firmware

Fx5uj 60mt/es Firmware

Fx5uj 60mt/es A Firmware

Fx5uj 60mt/ess Firmware

Fx5s 30mr/es Firmware

Fx5s 30mt/es Firmware

Fx5s 30mt/ess Firmware

Fx5s 40mr/es Firmware

Fx5s 40mt/es Firmware

Fx5s 40mt/ess Firmware

Fx5s 60mr/es Firmware

Fx5s 60mt/es Firmware

Fx5s 60mt/ess Firmware

Fx5s 80mr/es Firmware

Fx5s 80mt/es Firmware

Fx5s 80mt/ess Firmware

Fx5 Enet Firmware

Fx5 Enet/ip Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mr/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mr/ds Ts	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/d	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/dss	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/dss Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/dss Ts	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/ds Ts	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 64mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 64mt/d	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 64mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 64mt/dss	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 96mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 96mt/d	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 96mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 96mt/dss	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mr/es	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mr/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mr/es A	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/es	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/es A	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/ess	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mr/es	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mr/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mr/es A	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/es	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/es A	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/ess	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mr/es	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mr/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mr/es A	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/es	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/es A	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/ess	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 30mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 30mr/es	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 30mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 30mt/es	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 30mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 30mt/ess	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 40mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 40mr/es	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 40mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 40mt/es	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 40mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 40mt/ess	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 60mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 60mr/es	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 60mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 60mt/es	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 60mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 60mt/ess	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 80mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 80mr/es	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 80mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 80mt/es	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 80mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 80mt/ess	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5 Enet Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5 Enet	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5 Enet/ip Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5 Enet/ip	All versions

Related CWEs

CWE-256

Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (6)

https://jvn.jp/vu/JVNVU93891523/index.html

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

MitigationThird Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU93891523/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.