2 lines
4.7 KiB
JSON
2 lines
4.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MELSEC iQ-R Series EtherNet/IP module RJ71EIP91","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:fx5-enet\\/ip_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CE006D41-B94B-45A2-B43C-642616811792","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:fx5-enet\\/ip:-:*:*:*:*:*:*:*","matchCriteriaId":"EF5786BC-2E60-45A5-AD11-21CCAAFDDAAB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:sw1dnn-eipct-bd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"98777F49-8CB3-4546-875F-2664224FB52C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:sw1dnn-eipct-bd:-:*:*:*:*:*:*:*","matchCriteriaId":"8164854B-5BB1-4936-9BC8-CC78838A47D8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:rj71eip91_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FF8407A6-F78E-40B8-88D1-D8A824E882F0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:rj71eip91:-:*:*:*:*:*:*:*","matchCriteriaId":"0B2B7116-DAC9-4340-A625-93F461E96964","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:sw1dnn-eipctfx5-bd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D3210B54-8C0E-4A6D-B466-D1FFB3CA5F2A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:sw1dnn-eipctfx5-bd:-:*:*:*:*:*:*:*","matchCriteriaId":"B42CE2D9-B4E1-40AD-803F-48FA7C9B4230","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP."}],"id":"CVE-2023-2061","lastModified":"2026-06-17T05:51:18.693","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2061","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-05T18:36:44.832977Z","version":"2.0.3"}}]},"published":"2023-06-02T05:15:10.100","references":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Third Party Advisory"],"url":"https://jvn.jp/vu/JVNVU92908006"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://jvn.jp/vu/JVNVU92908006"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf"}],"sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-259"}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-798"}],"source":"nvd@nist.gov","type":"Primary"}]}
|