medium6.3
CVE-2023-2063
Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP9…
Impact
Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Fx5-Enet\/Ip Firmware | All versions |
| Mitsubishielectric | Sw1dnn-Eipct-Bd Firmware | All versions |
| Mitsubishielectric | Rj71eip91 Firmware | All versions |
| Mitsubishielectric | Sw1dnn-Eipctfx5-Bd Firmware | All versions |