high7.5
CVE-2022-33323
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote u…
Impact
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Rh-12sdh55 Firmware | All versions |
| Mitsubishielectric | Rh-12sdh70 Firmware | All versions |
| Mitsubishielectric | Rh-12sdh85 Firmware | All versions |
| Mitsubishielectric | Rh-12sqh55 Firmware | All versions |
| Mitsubishielectric | Rh-12sqh70 Firmware | All versions |
| Mitsubishielectric | Rh-12sqh85 Firmware | All versions |
| Mitsubishielectric | Rh-20sdh100 Firmware | All versions |
| Mitsubishielectric | Rh-20sdh85 Firmware | All versions |
| Mitsubishielectric | Rh-20sqh85 Firmware | All versions |
| Mitsubishielectric | Rh-3sdhr Firmware | All versions |
| Mitsubishielectric | Rh-3sqhr Firmware | All versions |
| Mitsubishielectric | Rh-6sdh35 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/vu/JVNVU94588481/index.html
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf
- https://jvn.jp/vu/JVNVU94588481/index.html
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf