CVE-2023-2846: Authentication Bypass Vulnerability in MELSEC-F Series main module

Published Jun 30, 2023
·
Updated

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Affected Software

301 affected components
Mitsubishi Electric ​FX3GE-xMy/z x=24,40, y=T,R, z=ES,ESS,DS,DSS
Mitsubishielectric Fx3u-16mr\/es Firmware
Mitsubishielectric Fx3u-16mr\/es
Mitsubishielectric Fx3u-16mt\/es Firmware
Mitsubishielectric Fx3u-16mt\/es
Mitsubishielectric Fx3u-16mt\/ess Firmware
Mitsubishielectric Fx3u-16mt\/ess
Mitsubishielectric Fx3u-32mr\/es Firmware
Mitsubishielectric Fx3u-32mr\/es
Mitsubishielectric Fx3u-32mt\/es Firmware
Mitsubishielectric Fx3u-32mt\/es
Mitsubishielectric Fx3u-32mt\/ess Firmware
Mitsubishielectric Fx3u-32mt\/ess
Mitsubishielectric Fx3u-48mr\/es Firmware
Mitsubishielectric Fx3u-48mr\/es
Mitsubishielectric Fx3u-48mt\/es Firmware
Mitsubishielectric Fx3u-48mt\/es
Mitsubishielectric Fx3u-48mt\/ess Firmware
Mitsubishielectric Fx3u-48mt\/ess
Mitsubishielectric Fx3u-64mr\/es Firmware
Mitsubishielectric Fx3u-64mr\/es
Mitsubishielectric Fx3u-64mt\/es Firmware
Mitsubishielectric Fx3u-64mt\/es
Mitsubishielectric Fx3u-64mt\/ess Firmware
Mitsubishielectric Fx3u-64mt\/ess
Mitsubishielectric Fx3u-80mr\/es Firmware
Mitsubishielectric Fx3u-80mr\/es
Mitsubishielectric Fx3u-80mt\/es Firmware
Mitsubishielectric Fx3u-80mt\/es
Mitsubishielectric Fx3u-80mt\/ess Firmware
Mitsubishielectric Fx3u-80mt\/ess
Mitsubishielectric Fx3u-128mr\/es Firmware
Mitsubishielectric Fx3u-128mr\/es
Mitsubishielectric Fx3u-128mt\/es Firmware
Mitsubishielectric Fx3u-128mt\/es
Mitsubishielectric Fx3u-128mt\/ess Firmware
Mitsubishielectric Fx3u-128mt\/ess
Mitsubishielectric Fx3u-16mr\/ds Firmware
Mitsubishielectric Fx3u-16mr\/ds
Mitsubishielectric Fx3u-16mt\/ds Firmware
Mitsubishielectric Fx3u-16mt\/ds
Mitsubishielectric Fx3u-16mt\/dss Firmware
Mitsubishielectric Fx3u-16mt\/dss
Mitsubishielectric Fx3u-32mr\/ds Firmware
Mitsubishielectric Fx3u-32mr\/ds
Mitsubishielectric Fx3u-32mt\/ds Firmware
Mitsubishielectric Fx3u-32mt\/ds
Mitsubishielectric Fx3u-32mt\/dss Firmware
Mitsubishielectric Fx3u-32mt\/dss
Mitsubishielectric Fx3u-48mr\/ds Firmware
Mitsubishielectric Fx3u-48mr\/ds
Mitsubishielectric Fx3u-48mt\/ds Firmware
Mitsubishielectric Fx3u-48mt\/ds
Mitsubishielectric Fx3u-48mt\/dss Firmware
Mitsubishielectric Fx3u-48mt\/dss
Mitsubishielectric Fx3u-64mr\/ds Firmware
Mitsubishielectric Fx3u-64mr\/ds
Mitsubishielectric Fx3u-64mt\/ds Firmware
Mitsubishielectric Fx3u-64mt\/ds
Mitsubishielectric Fx3u-64mt\/dss Firmware
Mitsubishielectric Fx3u-64mt\/dss
Mitsubishielectric Fx3u-80mr\/ds Firmware
Mitsubishielectric Fx3u-80mr\/ds
Mitsubishielectric Fx3u-80mt\/ds Firmware
Mitsubishielectric Fx3u-80mt\/ds
Mitsubishielectric Fx3u-80mt\/dss Firmware
Mitsubishielectric Fx3u-80mt\/dss
Mitsubishielectric Fx3u-32mr\/ua1 Firmware
Mitsubishielectric Fx3u-32mr\/ua1
Mitsubishielectric Fx3u-64mr\/ua1 Firmware
Mitsubishielectric Fx3u-64mr\/ua1
Mitsubishielectric Fx3u-32ms\/es Firmware
Mitsubishielectric Fx3u-32ms\/es
Mitsubishielectric Fx3u-64ms\/es Firmware
Mitsubishielectric Fx3u-64ms\/es
Mitsubishielectric Fx3u-16mr\/es-a Firmware
Mitsubishielectric Fx3u-16mr\/es-a
Mitsubishielectric Fx3u-16mt\/es-a Firmware
Mitsubishielectric Fx3u-16mt\/es-a
Mitsubishielectric Fx3u-32mr\/es-a Firmware
Mitsubishielectric Fx3u-32mr\/es-a
Mitsubishielectric Fx3u-32mt\/es-a Firmware
Mitsubishielectric Fx3u-32mt\/es-a
Mitsubishielectric Fx3u-48mr\/es-a Firmware
Mitsubishielectric Fx3u-48mr\/es-a
Mitsubishielectric Fx3u-48mt\/es-a Firmware
Mitsubishielectric Fx3u-48mt\/es-a
Mitsubishielectric Fx3u-64mr\/es-a Firmware
Mitsubishielectric Fx3u-64mr\/es-a
Mitsubishielectric Fx3u-64mt\/es-a Firmware
Mitsubishielectric Fx3u-64mt\/es-a
Mitsubishielectric Fx3u-80mr\/es-a Firmware
Mitsubishielectric Fx3u-80mr\/es-a
Mitsubishielectric Fx3u-80mt\/es-a Firmware
Mitsubishielectric Fx3u-80mt\/es-a
Mitsubishielectric Fx3u-128mr\/es-a Firmware
Mitsubishielectric Fx3u-128mr\/es-a
Mitsubishielectric Fx3u-128mt\/es-a Firmware
Mitsubishielectric Fx3u-128mt\/es-a
Mitsubishielectric Fx3uc-16mt\/d Firmware
Mitsubishielectric Fx3uc-16mt\/d
Mitsubishielectric Fx3uc-32mt\/d Firmware
Mitsubishielectric Fx3uc-32mt\/d
Mitsubishielectric Fx3uc-64mt\/d Firmware
Mitsubishielectric Fx3uc-64mt\/d
Mitsubishielectric Fx3uc-96mt\/d Firmware
Mitsubishielectric Fx3uc-96mt\/d
Mitsubishielectric Fx3uc-16mt\/dss Firmware
Mitsubishielectric Fx3uc-16mt\/dss
Mitsubishielectric Fx3uc-32mt\/dss Firmware
Mitsubishielectric Fx3uc-32mt\/dss
Mitsubishielectric Fx3uc-64mt\/dss Firmware
Mitsubishielectric Fx3uc-64mt\/dss
Mitsubishielectric Fx3uc-96mt\/dss Firmware
Mitsubishielectric Fx3uc-96mt\/dss
Mitsubishielectric Fx3uc-16mr\/d-t Firmware
Mitsubishielectric Fx3uc-16mr\/d-t
Mitsubishielectric Fx3uc-16mr\/ds-t Firmware
Mitsubishielectric Fx3uc-16mr\/ds-t
Mitsubishielectric Fx3uc-32mt-lt Firmware
Mitsubishielectric Fx3uc-32mt-lt
Mitsubishielectric Fx3uc-32mt-lt-2 Firmware
Mitsubishielectric Fx3uc-32mt-lt-2
Mitsubishielectric Fx3uc-16mt\/d-p4 Firmware
Mitsubishielectric Fx3uc-16mt\/d-p4
Mitsubishielectric Fx3uc-16mt\/dss-p4 Firmware
Mitsubishielectric Fx3uc-16mt\/dss-p4
Mitsubishielectric Fx3g-14mr\/es Firmware
Mitsubishielectric Fx3g-14mr\/es
Mitsubishielectric Fx3g-14mt\/es Firmware
Mitsubishielectric Fx3g-14mt\/es
Mitsubishielectric Fx3g-14mt\/ess Firmware
Mitsubishielectric Fx3g-14mt\/ess
Mitsubishielectric Fx3g-24mr\/es Firmware
Mitsubishielectric Fx3g-24mr\/es
Mitsubishielectric Fx3g-24mt\/es Firmware
Mitsubishielectric Fx3g-24mt\/es
Mitsubishielectric Fx3g-24mt\/ess Firmware
Mitsubishielectric Fx3g-24mt\/ess
Mitsubishielectric Fx3g-40mr\/es Firmware
Mitsubishielectric Fx3g-40mr\/es
Mitsubishielectric Fx3g-40mt\/es Firmware
Mitsubishielectric Fx3g-40mt\/es
Mitsubishielectric Fx3g-40mt\/ess Firmware
Mitsubishielectric Fx3g-40mt\/ess
Mitsubishielectric Fx3g-60mr\/es Firmware
Mitsubishielectric Fx3g-60mr\/es
Mitsubishielectric Fx3g-60mt\/es Firmware
Mitsubishielectric Fx3g-60mt\/es
Mitsubishielectric Fx3g-60mt\/ess Firmware
Mitsubishielectric Fx3g-60mt\/ess
Mitsubishielectric Fx3g-14mr\/ds Firmware
Mitsubishielectric Fx3g-14mr\/ds
Mitsubishielectric Fx3g-14mt\/ds Firmware
Mitsubishielectric Fx3g-14mt\/ds
Mitsubishielectric Fx3g-14mt\/dss Firmware
Mitsubishielectric Fx3g-14mt\/dss
Mitsubishielectric Fx3g-24mr\/ds Firmware
Mitsubishielectric Fx3g-24mr\/ds
Mitsubishielectric Fx3g-24mt\/ds Firmware
Mitsubishielectric Fx3g-24mt\/ds
Mitsubishielectric Fx3g-24mt\/dss Firmware
Mitsubishielectric Fx3g-24mt\/dss
Mitsubishielectric Fx3g-40mr\/ds Firmware
Mitsubishielectric Fx3g-40mr\/ds
Mitsubishielectric Fx3g-40mt\/ds Firmware
Mitsubishielectric Fx3g-40mt\/ds
Mitsubishielectric Fx3g-40mt\/dss Firmware
Mitsubishielectric Fx3g-40mt\/dss
Mitsubishielectric Fx3g-60mr\/ds Firmware
Mitsubishielectric Fx3g-60mr\/ds
Mitsubishielectric Fx3g-60mt\/ds Firmware
Mitsubishielectric Fx3g-60mt\/ds
Mitsubishielectric Fx3g-60mt\/dss Firmware
Mitsubishielectric Fx3g-60mt\/dss
Mitsubishielectric Fx3g-14mr\/es-a Firmware
Mitsubishielectric Fx3g-14mr\/es-a
Mitsubishielectric Fx3g-14mt\/es-a Firmware
Mitsubishielectric Fx3g-14mt\/es-a
Mitsubishielectric Fx3g-24mr\/es-a Firmware
Mitsubishielectric Fx3g-24mr\/es-a
Mitsubishielectric Fx3g-24mt\/es-a Firmware
Mitsubishielectric Fx3g-24mt\/es-a
Mitsubishielectric Fx3g-40mr\/es-a Firmware
Mitsubishielectric Fx3g-40mr\/es-a
Mitsubishielectric Fx3g-40mt\/es-a Firmware
Mitsubishielectric Fx3g-40mt\/es-a
Mitsubishielectric Fx3g-60mr\/es-a Firmware
Mitsubishielectric Fx3g-60mr\/es-a
Mitsubishielectric Fx3g-60mt\/es-a Firmware
Mitsubishielectric Fx3g-60mt\/es-a
Mitsubishielectric Fx3gc-32mt\/d Firmware
Mitsubishielectric Fx3gc-32mt\/d
Mitsubishielectric Fx3gc-32mt\/dss Firmware
Mitsubishielectric Fx3gc-32mt\/dss
Mitsubishielectric Fx3ge-24mr\/es Firmware
Mitsubishielectric Fx3ge-24mr\/es
Mitsubishielectric Fx3ge-24mt\/es Firmware
Mitsubishielectric Fx3ge-24mt\/es
Mitsubishielectric Fx3ge-24mt\/ess Firmware
Mitsubishielectric Fx3ge-24mt\/ess
Mitsubishielectric Fx3ge-40mr\/es Firmware
Mitsubishielectric Fx3ge-40mr\/es
Mitsubishielectric Fx3ge-40mt\/es Firmware
Mitsubishielectric Fx3ge-40mt\/es
Mitsubishielectric Fx3ge-40mt\/ess Firmware
Mitsubishielectric Fx3ge-40mt\/ess
Mitsubishielectric Fx3ge-24mr\/ds Firmware
Mitsubishielectric Fx3ge-24mr\/ds
Mitsubishielectric Fx3ge-24mt\/ds Firmware
Mitsubishielectric Fx3ge-24mt\/ds
Mitsubishielectric Fx3ge-24mt\/dss Firmware
Mitsubishielectric Fx3ge-24mt\/dss
Mitsubishielectric Fx3ge-40mr\/ds Firmware
Mitsubishielectric Fx3ge-40mr\/ds
Mitsubishielectric Fx3ge-40mt\/ds Firmware
Mitsubishielectric Fx3ge-40mt\/ds
Mitsubishielectric Fx3ge-40mt\/dss Firmware
Mitsubishielectric Fx3ge-40mt\/dss
Mitsubishielectric Fx3ga-24mr-cm Firmware
Mitsubishielectric Fx3ga-24mr-cm
Mitsubishielectric Fx3ga-24mt-cm Firmware
Mitsubishielectric Fx3ga-24mt-cm
Mitsubishielectric Fx3ga-40mr-cm Firmware
Mitsubishielectric Fx3ga-40mr-cm
Mitsubishielectric Fx3ga-40mt-cm Firmware
Mitsubishielectric Fx3ga-40mt-cm
Mitsubishielectric Fx3ga-60mr-cm Firmware
Mitsubishielectric Fx3ga-60mr-cm
Mitsubishielectric Fx3ga-60mt-cm Firmware
Mitsubishielectric Fx3ga-60mt-cm
Mitsubishielectric Fx3s-10mr\/ds Firmware
Mitsubishielectric Fx3s-10mr\/ds
Mitsubishielectric Fx3s-10mr\/es Firmware
Mitsubishielectric Fx3s-10mr\/es
Mitsubishielectric Fx3s-10mt\/ds Firmware
Mitsubishielectric Fx3s-10mt\/ds
Mitsubishielectric Fx3s-10mt\/dss Firmware
Mitsubishielectric Fx3s-10mt\/dss
Mitsubishielectric Fx3s-10mt\/es Firmware
Mitsubishielectric Fx3s-10mt\/es
Mitsubishielectric Fx3s-10mt\/ess Firmware
Mitsubishielectric Fx3s-10mt\/ess
Mitsubishielectric Fx3s-14mr\/ds Firmware
Mitsubishielectric Fx3s-14mr\/ds
Mitsubishielectric Fx3s-14mr\/es Firmware
Mitsubishielectric Fx3s-14mr\/es
Mitsubishielectric Fx3s-14mt\/ds Firmware
Mitsubishielectric Fx3s-14mt\/ds
Mitsubishielectric Fx3s-14mt\/dss Firmware
Mitsubishielectric Fx3s-14mt\/dss
Mitsubishielectric Fx3s-14mt\/es Firmware
Mitsubishielectric Fx3s-14mt\/es
Mitsubishielectric Fx3s-14mt\/ess Firmware
Mitsubishielectric Fx3s-14mt\/ess
Mitsubishielectric Fx3s-20mr\/ds Firmware
Mitsubishielectric Fx3s-20mr\/ds
Mitsubishielectric Fx3s-20mr\/es Firmware
Mitsubishielectric Fx3s-20mr\/es
Mitsubishielectric Fx3s-20mt\/ds Firmware
Mitsubishielectric Fx3s-20mt\/ds
Mitsubishielectric Fx3s-20mt\/dss Firmware
Mitsubishielectric Fx3s-20mt\/dss
Mitsubishielectric Fx3s-20mt\/es Firmware
Mitsubishielectric Fx3s-20mt\/es
Mitsubishielectric Fx3s-20mt\/ess Firmware
Mitsubishielectric Fx3s-20mt\/ess
Mitsubishielectric Fx3s-30mr\/ds Firmware
Mitsubishielectric Fx3s-30mr\/ds
Mitsubishielectric Fx3s-30mr\/es Firmware
Mitsubishielectric Fx3s-30mr\/es
Mitsubishielectric Fx3s-30mt\/ds Firmware
Mitsubishielectric Fx3s-30mt\/ds
Mitsubishielectric Fx3s-30mt\/dss Firmware
Mitsubishielectric Fx3s-30mt\/dss
Mitsubishielectric Fx3s-30mt\/es Firmware
Mitsubishielectric Fx3s-30mt\/es
Mitsubishielectric Fx3s-30mt\/ess Firmware
Mitsubishielectric Fx3s-30mt\/ess
Mitsubishielectric Fx3s-30mr\/es-2ad Firmware
Mitsubishielectric Fx3s-30mr\/es-2ad
Mitsubishielectric Fx3s-30mt\/es-2ad Firmware
Mitsubishielectric Fx3s-30mt\/es-2ad
Mitsubishielectric Fx3s-30mt\/ess-2ad Firmware
Mitsubishielectric Fx3s-30mt\/ess-2ad
Mitsubishielectric Fx3sa-10mr-cm Firmware
Mitsubishielectric Fx3sa-10mr-cm
Mitsubishielectric Fx3sa-10mt-cm Firmware
Mitsubishielectric Fx3sa-10mt-cm
Mitsubishielectric Fx3sa-14mr-cm Firmware
Mitsubishielectric Fx3sa-14mr-cm
Mitsubishielectric Fx3sa-14mt-cm Firmware
Mitsubishielectric Fx3sa-14mt-cm
Mitsubishielectric Fx3sa-20mr-cm Firmware
Mitsubishielectric Fx3sa-20mr-cm
Mitsubishielectric Fx3sa-20mt-cm Firmware
Mitsubishielectric Fx3sa-20mt-cm
Mitsubishielectric Fx3sa-30mr-cm Firmware
Mitsubishielectric Fx3sa-30mr-cm
Mitsubishielectric Fx3sa-30mt-cm Firmware
Mitsubishielectric Fx3sa-30mt-cm

Event History

Jun 30, 2023
CVE Published
via MITRE·04:05 AM
Data Sourced
via MITRE·04:05 AM
DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-2846?

CVE-2023-2846 has been rated as critical due to its potential for an unauthenticated remote attacker to exploit the vulnerability.

2

How do I fix CVE-2023-2846?

To resolve CVE-2023-2846, users should install the latest firmware updates provided by Mitsubishi Electric for affected devices.

3

What are the affected products for CVE-2023-2846?

CVE-2023-2846 impacts various Mitsubishi Electric MELSEC iQ-F Series main modules, including multiple models of the FX3U, FX3MT, FX3UC, and related firmware versions.

4

Can CVE-2023-2846 be exploited remotely?

Yes, CVE-2023-2846 allows an unauthenticated remote attacker to exploit the vulnerability by sending crafted packets.

5

What is the nature of the CVE-2023-2846 vulnerability?

CVE-2023-2846 is an authentication bypass by capture-replay vulnerability that allows unauthorized access to settings and login.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
CVE-2023-2846 - Authentication Bypass Vulnerability in MELSEC-F Series main module - SecAlerts