Skip to content
OpenAdvisories
High · 7.5 CVE-2023-2846 EUVD-2023-34297GHSA-f86h-3pcp-x4mw

Authentication Bypass Vulnerability in MELSEC-F Series main module

Published Jun 30, 2023 · Updated Mar 5, 2025 · Assigned by Mitsubishi

Vendor: Mitsubishi Electric Product: MELSEC-F Series FX3U-128MR/ES Product: MELSEC-F Series FX3U-128MR/ES-A Product: MELSEC-F Series FX3U-128MT/ES Product: MELSEC-F Series FX3U-128MT/ES-A Product: MELSEC-F Series FX3U-128MT/ESS Product: MELSEC-F Series FX3U-16MR/DS Product: MELSEC-F Series FX3U-16MR/ES Product: MELSEC-F Series FX3U-16MR/ES-A Product: MELSEC-F Series FX3U-16MT/DS Product: MELSEC-F Series FX3U-16MT/DSS Product: MELSEC-F Series FX3U-16MT/ES Product: MELSEC-F Series FX3U-16MT/ES-A Product: MELSEC-F Series FX3U-16MT/ESS Product: MELSEC-F Series FX3U-32MR/DS Product: MELSEC-F Series FX3U-32MR/ES Product: MELSEC-F Series FX3U-32MR/ES-A Product: MELSEC-F Series FX3U-32MR/UA1 Product: MELSEC-F Series FX3U-32MS/ES Product: MELSEC-F Series FX3U-32MT/DS Product: MELSEC-F Series FX3U-32MT/DSS Product: MELSEC-F Series FX3U-32MT/ES Product: MELSEC-F Series FX3U-32MT/ES-A Product: MELSEC-F Series FX3U-32MT/ESS Product: MELSEC-F Series FX3U-48MR/DS Product: MELSEC-F Series FX3U-48MR/ES Product: MELSEC-F Series FX3U-48MR/ES-A Product: MELSEC-F Series FX3U-48MT/DS Product: MELSEC-F Series FX3U-48MT/DSS Product: MELSEC-F Series FX3U-48MT/ES Product: MELSEC-F Series FX3U-48MT/ES-A Product: MELSEC-F Series FX3U-48MT/ESS Product: MELSEC-F Series FX3U-64MR/DS Product: MELSEC-F Series FX3U-64MR/ES Product: MELSEC-F Series FX3U-64MR/ES-A Product: MELSEC-F Series FX3U-64MR/UA1 Product: MELSEC-F Series FX3U-64MS/ES Product: MELSEC-F Series FX3U-64MT/DS Product: MELSEC-F Series FX3U-64MT/DSS Product: MELSEC-F Series FX3U-64MT/ES Product: MELSEC-F Series FX3U-64MT/ES-A Product: MELSEC-F Series FX3U-64MT/ESS Product: MELSEC-F Series FX3U-80MR/DS Product: MELSEC-F Series FX3U-80MR/ES Product: MELSEC-F Series FX3U-80MR/ES-A Product: MELSEC-F Series FX3U-80MT/DS Product: MELSEC-F Series FX3U-80MT/DSS Product: MELSEC-F Series FX3U-80MT/ES Product: MELSEC-F Series FX3U-80MT/ES-A Product: MELSEC-F Series FX3U-80MT/ESS Product: MELSEC-F Series FX3UC-16MT/D Category: ICS / OT

Description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Affected products

VendorProductAffectedFixed
Mitsubishi Electric MELSEC-F Series FX3U-16MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-128MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-128MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-128MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MR/UA1 all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MR/UA1 all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MS/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MS/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-16MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-32MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-48MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-64MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-80MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-128MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3U-128MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-16MT/D all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-32MT/D all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-64MT/D all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-96MT/D all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-16MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-32MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-64MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-96MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-16MR/D-T all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-16MR/DS-T all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-32MT-LT all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-32MT-LT-2 all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-16MT/D-P4 all versions —
Mitsubishi Electric MELSEC-F Series FX3UC-16MT/DSS-P4 all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MT/ESS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MR/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MT/DS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-14MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-24MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-40MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MR/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3G-60MT/ES-A all versions —
Mitsubishi Electric MELSEC-F Series FX3GC-32MT/D all versions —
Mitsubishi Electric MELSEC-F Series FX3GC-32MT/DSS all versions —
Mitsubishi Electric MELSEC-F Series FX3GE-24MR/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3GE-24MT/ES all versions —
Mitsubishi Electric MELSEC-F Series FX3GE-24MT/ESS all versions —

Advisories 1

References