high7.5
CVE-2023-2060
Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Ser…
Impact
Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Fx5-Enet\/Ip Firmware | All versions |
| Mitsubishielectric | Sw1dnn-Eipct-Bd Firmware | All versions |
| Mitsubishielectric | Rj71eip91 Firmware | All versions |
| Mitsubishielectric | Sw1dnn-Eipctfx5-Bd Firmware | All versions |