NetSight
medium6.2

CVE-2023-2061

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Ser…

Impact

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.

Affected products

VendorProductAffected versions
MitsubishielectricFx5-Enet\/Ip Firmware
All versions
MitsubishielectricSw1dnn-Eipct-Bd Firmware
All versions
MitsubishielectricRj71eip91 Firmware
All versions
MitsubishielectricSw1dnn-Eipctfx5-Bd Firmware
All versions

Weakness classification

References