CVE-2023-4699

Description

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishi Electric CNC M800/M80/E80 series and Mitsubishi Electric CNC M700V/M70V/E70 series allows a remote unauthenticated attacker to execute arbitrary commands by sending specific packets to the affected products. This could lead to disclose or tamper with information by reading or writing control programs, or cause a denial-of-service (DoS) condition on the products by resetting the memory contents of the products to factory settings or resetting the products remotely.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

9.1 Critical

Impact Score:

5.2

Exploitability Score:

3.9

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Attack Vector (AV):

Network

Attack Complexity (AC):

Low

Privileges Required (PR):

None

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

None

Integrity (I):

High

Availability (A):

High

General Information

Offensive Application

Unknown

Utility Class

Unknown

Ports

Unknown

Vulnerable Versions

MELSEC-F Series FX3U-16MT/ES all versions

MELSEC-F Series FX3U-32MT/ES all versions

MELSEC-F Series FX3U-48MT/ES all versions

MELSEC-F Series FX3U-64MT/ES all versions

MELSEC-F Series FX3U-80MT/ES all versions

MELSEC-F Series FX3U-128MT/ES all versions

MELSEC-F Series FX3U-16MR/ES all versions

MELSEC-F Series FX3U-32MR/ES all versions

MELSEC-F Series FX3U-48MR/ES all versions

MELSEC-F Series FX3U-64MR/ES all versions

MELSEC-F Series FX3U-80MR/ES all versions

MELSEC-F Series FX3U-128MR/ES all versions

MELSEC-F Series FX3U-16MT/ESS all versions

MELSEC-F Series FX3U-32MT/ESS all versions

MELSEC-F Series FX3U-48MT/ESS all versions

MELSEC-F Series FX3U-64MT/ESS all versions

MELSEC-F Series FX3U-80MT/ESS all versions

MELSEC-F Series FX3U-128MT/ESS all versions

MELSEC-F Series FX3U-16MT/DS all versions

MELSEC-F Series FX3U-32MT/DS all versions

MELSEC-F Series FX3U-48MT/DS all versions

MELSEC-F Series FX3U-64MT/DS all versions

MELSEC-F Series FX3U-80MT/DS all versions

MELSEC-F Series FX3U-128MT/DS all versions

MELSEC-F Series FX3U-16MR/DS all versions

MELSEC-F Series FX3U-32MR/DS all versions

MELSEC-F Series FX3U-48MR/DS all versions

MELSEC-F Series FX3U-64MR/DS all versions

MELSEC-F Series FX3U-80MR/DS all versions

MELSEC-F Series FX3U-128MR/DS all versions

MELSEC-F Series FX3U-16MT/DSS all versions

MELSEC-F Series FX3U-32MT/DSS all versions

MELSEC-F Series FX3U-48MT/DSS all versions

MELSEC-F Series FX3U-64MT/DSS all versions

MELSEC-F Series FX3U-80MT/DSS all versions

MELSEC-F Series FX3U-128MT/DSS all versions

MELSEC-F Series FX3U-32MR/UA1 all versions

MELSEC-F Series FX3U-64MR/UA1 all versions

MELSEC-F Series FX3U-32MS/ES all versions

MELSEC-F Series FX3U-64MS/ES all versions

MELSEC-F Series FX3U-16MT/ES-A all versions

MELSEC-F Series FX3U-32MT/ES-A all versions

MELSEC-F Series FX3U-48MT/ES-A all versions

MELSEC-F Series FX3U-64MT/ES-A all versions

MELSEC-F Series FX3U-80MT/ES-A all versions

MELSEC-F Series FX3U-128MT/ES-A all versions

MELSEC-F Series FX3U-16MR/ES-A all versions

MELSEC-F Series FX3U-32MR/ES-A all versions

MELSEC-F Series FX3U-48MR/ES-A all versions

MELSEC-F Series FX3U-64MR/ES-A all versions

MELSEC-F Series FX3U-80MR/ES-A all versions

MELSEC-F Series FX3U-128MR/ES-A all versions

MELSEC-F Series FX3UC-16MT/D all versions

MELSEC-F Series FX3UC-32MT/D all versions

MELSEC-F Series FX3UC-64MT/D all versions

MELSEC-F Series FX3UC-96MT/D all versions

MELSEC-F Series FX3UC-16MT/DSS all versions

MELSEC-F Series FX3UC-32MT/DSS all versions

MELSEC-F Series FX3UC-64MT/DSS all versions

MELSEC-F Series FX3UC-96MT/DSS all versions

MELSEC-F Series FX3UC-16MR/D-T all versions

MELSEC-F Series FX3UC-16MR/DS-T all versions

MELSEC-F Series FX3UC-32MT-LT all versions

MELSEC-F Series FX3UC-32MT-LT-2 all versions

MELSEC-F Series FX3UC-16MT/D-P4 all versions

MELSEC-F Series FX3UC-16MT/DSS-P4 all versions

MELSEC-F Series FX3G-14MT/ES all versions

MELSEC-F Series FX3G-24MT/ES all versions

MELSEC-F Series FX3G-40MT/ES all versions

MELSEC-F Series FX3G-60MT/ES all versions

MELSEC-F Series FX3G-14MR/ES all versions

MELSEC-F Series FX3G-24MR/ES all versions

MELSEC-F Series FX3G-40MR/ES all versions

MELSEC-F Series FX3G-60MR/ES all versions

MELSEC-F Series FX3G-14MT/ESS all versions

MELSEC-F Series FX3G-24MT/ESS all versions

MELSEC-F Series FX3G-40MT/ESS all versions

MELSEC-F Series FX3G-60MT/ESS all versions

MELSEC-F Series FX3G-14MT/DS all versions

MELSEC-F Series FX3G-24MT/DS all versions

MELSEC-F Series FX3G-40MT/DS all versions

MELSEC-F Series FX3G-60MT/DS all versions

MELSEC-F Series FX3G-14MR/DS all versions

MELSEC-F Series FX3G-24MR/DS all versions

MELSEC-F Series FX3G-40MR/DS all versions

MELSEC-F Series FX3G-60MR/DS all versions

MELSEC-F Series FX3G-14MT/DSS all versions

MELSEC-F Series FX3G-24MT/DSS all versions

MELSEC-F Series FX3G-40MT/DSS all versions

MELSEC-F Series FX3G-60MT/DSS all versions

MELSEC-F Series FX3G-14MT/ES-A all versions

MELSEC-F Series FX3G-24MT/ES-A all versions

MELSEC-F Series FX3G-40MT/ES-A all versions

MELSEC-F Series FX3G-60MT/ES-A all versions

MELSEC-F Series FX3G-14MR/ES-A all versions

MELSEC-F Series FX3G-24MR/ES-A all versions

MELSEC-F Series FX3G-40MR/ES-A all versions

MELSEC-F Series FX3G-60MR/ES-A all versions

MELSEC-F Series FX3GC-32MT/D all versions

MELSEC-F Series FX3GC-32MT/DSS all versions

MELSEC-F Series FX3GE-24MT/ES all versions

MELSEC-F Series FX3GE-40MT/ES all versions

MELSEC-F Series FX3GE-24MR/ES all versions

MELSEC-F Series FX3GE-40MR/ES all versions

MELSEC-F Series FX3GE-24MT/ESS all versions

MELSEC-F Series FX3GE-40MT/ESS all versions

MELSEC-F Series FX3GE-24MT/DS all versions

MELSEC-F Series FX3GE-40MT/DS all versions

MELSEC-F Series FX3GE-24MR/DS all versions

MELSEC-F Series FX3GE-40MR/DS all versions

MELSEC-F Series FX3GE-24MT/DSS all versions

MELSEC-F Series FX3GE-40MT/DSS all versions

MELSEC-F Series FX3GA-24MT-CM all versions

MELSEC-F Series FX3GA-40MT-CM all versions

MELSEC-F Series FX3GA-60MT-CM all versions

MELSEC-F Series FX3GA-24MR-CM all versions

MELSEC-F Series FX3GA-40MR-CM all versions

MELSEC-F Series FX3GA-60MR-CM all versions

MELSEC-F Series FX3S-10MT/ES all versions

MELSEC-F Series FX3S-14MT/ES all versions

MELSEC-F Series FX3S-20MT/ES all versions

MELSEC-F Series FX3S-30MT/ES all versions

MELSEC-F Series FX3S-10MR/ES all versions

MELSEC-F Series FX3S-14MR/ES all versions

MELSEC-F Series FX3S-20MR/ES all versions

MELSEC-F Series FX3S-30MR/ES all versions

MELSEC-F Series FX3S-10MT/ESS all versions

MELSEC-F Series FX3S-14MT/ESS all versions

MELSEC-F Series FX3S-20MT/ESS all versions

MELSEC-F Series FX3S-30MT/ESS all versions

MELSEC-F Series FX3S-10MT/DS all versions

MELSEC-F Series FX3S-14MT/DS all versions

MELSEC-F Series FX3S-20MT/DS all versions

MELSEC-F Series FX3S-30MT/DS all versions

MELSEC-F Series FX3S-10MR/DS all versions

MELSEC-F Series FX3S-14MR/DS all versions

MELSEC-F Series FX3S-20MR/DS all versions

MELSEC-F Series FX3S-30MR/DS all versions

MELSEC-F Series FX3S-10MT/DSS all versions

MELSEC-F Series FX3S-14MT/DSS all versions

MELSEC-F Series FX3S-20MT/DSS all versions

MELSEC-F Series FX3S-30MT/DSS all versions

MELSEC-F Series FX3S-30MT/ES-2AD all versions

MELSEC-F Series FX3S-30MR/ES-2AD all versions

MELSEC-F Series FX3S-30MT/ESS-2AD all versions

MELSEC-F Series FX3SA-10MT-CM all versions

MELSEC-F Series FX3SA-14MT-CM all versions

MELSEC-F Series FX3SA-20MT-CM all versions

MELSEC-F Series FX3SA-30MT-CM all versions

MELSEC-F Series FX3SA-10MR-CM all versions

MELSEC-F Series FX3SA-14MR-CM all versions

MELSEC-F Series FX3SA-20MR-CM all versions

MELSEC-F Series FX3SA-30MR-CM all versions

MELSEC iQ-F Series FX5U-32MT/ES all versions

MELSEC iQ-F Series FX5U-64MT/ES all versions

MELSEC iQ-F Series FX5U-80MT/ES all versions

MELSEC iQ-F Series FX5U-32MR/ES all versions

MELSEC iQ-F Series FX5U-64MR/ES all versions

MELSEC iQ-F Series FX5U-80MR/ES all versions

MELSEC iQ-F Series FX5U-32MT/DS all versions

MELSEC iQ-F Series FX5U-64MT/DS all versions

MELSEC iQ-F Series FX5U-80MT/DS all versions

MELSEC iQ-F Series FX5U-32MR/DS all versions

MELSEC iQ-F Series FX5U-64MR/DS all versions

MELSEC iQ-F Series FX5U-80MR/DS all versions

MELSEC iQ-F Series FX5U-32MT/ESS all versions

MELSEC iQ-F Series FX5U-64MT/ESS all versions

MELSEC iQ-F Series FX5U-80MT/ESS all versions

MELSEC iQ-F Series FX5U-32MT/DSS all versions

MELSEC iQ-F Series FX5U-64MT/DSS all versions

MELSEC iQ-F Series FX5U-80MT/DSS all versions

MELSEC iQ-F Series FX5UC-32MT/D all versions

MELSEC iQ-F Series FX5UC-64MT/D all versions

MELSEC iQ-F Series FX5UC-96MT/D all versions

MELSEC iQ-F Series FX5UC-32MT/DSS all versions

MELSEC iQ-F Series FX5UC-64MT/DSS all versions

MELSEC iQ-F Series FX5UC-96MT/DSS all versions

MELSEC iQ-F Series FX5UC-32MT/DS-TS all versions

MELSEC iQ-F Series FX5UC-32MT/DSS-TS all versions

MELSEC iQ-F Series FX5UC-32MR/DS-TS all versions

MELSEC iQ-F Series FX5UJ-24MT/ES all versions

MELSEC iQ-F Series FX5UJ-40MT/ES all versions

MELSEC iQ-F Series FX5UJ-60MT/ES all versions

MELSEC iQ-F Series FX5UJ-24MR/ES all versions

MELSEC iQ-F Series FX5UJ-40MR/ES all versions

MELSEC iQ-F Series FX5UJ-60MR/ES all versions

MELSEC iQ-F Series FX5UJ-24MT/ESS all versions

MELSEC iQ-F Series FX5UJ-40MT/ESS all versions

MELSEC iQ-F Series FX5UJ-60MT/ESS all versions

MELSEC iQ-F Series FX5UJ-24MT/DS all versions

MELSEC iQ-F Series FX5UJ-40MT/DS all versions

MELSEC iQ-F Series FX5UJ-60MT/DS all versions

MELSEC iQ-F Series FX5UJ-24MR/DS all versions

MELSEC iQ-F Series FX5UJ-40MR/DS all versions

MELSEC iQ-F Series FX5UJ-60MR/DS all versions

MELSEC iQ-F Series FX5UJ-24MT/DSS all versions

MELSEC iQ-F Series FX5UJ-40MT/DSS all versions

MELSEC iQ-F Series FX5UJ-60MT/DSS all versions

MELSEC iQ-F Series FX5UJ-24MT/ES-A all versions

MELSEC iQ-F Series FX5UJ-40MT/ES-A all versions

MELSEC iQ-F Series FX5UJ-60MT/ES-A all versions

MELSEC iQ-F Series FX5UJ-24MR/ES-A all versions

MELSEC iQ-F Series FX5UJ-40MR/ES-A all versions

MELSEC iQ-F Series FX5UJ-60MR/ES-A all versions

MELSEC iQ-F Series FX5S-30MT/ES all versions

MELSEC iQ-F Series FX5S-40MT/ES all versions

MELSEC iQ-F Series FX5S-60MT/ES all versions

MELSEC iQ-F Series FX5S-80MT/ES all versions

MELSEC iQ-F Series FX5S-30MR/ES all versions

MELSEC iQ-F Series FX5S-40MR/ES all versions

MELSEC iQ-F Series FX5S-60MR/ES all versions

MELSEC iQ-F Series FX5S-80MR/ES all versions

MELSEC iQ-F Series FX5S-30MT/ESS all versions

MELSEC iQ-F Series FX5S-40MT/ESS all versions

MELSEC iQ-F Series FX5S-60MT/ESS all versions

MELSEC iQ-F Series FX5S-80MT/ESS all versions

MELSEC iQ-F Series FX5-40SSC-G all versions

MELSEC iQ-F Series FX5-80SSC-G all versions

MELSEC iQ-F Series FX5-40SSC-S all versions

MELSEC iQ-F Series FX5-80SSC-S all versions

MELSEC iQ-R Series R04CPU all versions

MELSEC iQ-R Series R08CPU all versions

MELSEC iQ-R Series R16CPU all versions

MELSEC iQ-R Series R32CPU all versions

MELSEC iQ-R Series R120CPU all versions

MELSEC iQ-R Series R04ENCPU all versions

MELSEC iQ-R Series R08ENCPU all versions

MELSEC iQ-R Series R16ENCPU all versions

MELSEC iQ-R Series R32ENCPU all versions

MELSEC iQ-R Series R120ENCPU all versions

MELSEC iQ-R Series R08PCPU all versions

MELSEC iQ-R Series R16PCPU all versions

MELSEC iQ-R Series R32PCPU all versions

MELSEC iQ-R Series R120PCPU all versions

MELSEC iQ-R Series R16MTCPU all versions

MELSEC iQ-R Series R32MTCPU all versions

MELSEC iQ-R Series R64MTCPU all versions

MELSEC iQ-R Series RD78G4 all versions

MELSEC iQ-R Series RD78G8 all versions

MELSEC iQ-R Series RD78G16 all versions

MELSEC iQ-R Series RD78G32 all versions

MELSEC iQ-R Series RD78G64 all versions

MELSEC iQ-R Series RD78GHV all versions

MELSEC iQ-R Series RD78GHW all versions

MELSEC iQ-R Series RD77MS2 all versions

MELSEC iQ-R Series RD77MS4 all versions

MELSEC iQ-R Series RD77MS8 all versions

MELSEC iQ-R Series RD77MS16 all versions

MELSEC iQ-R Series RD77GF4 all versions

MELSEC iQ-R Series RD77GF8 all versions

MELSEC iQ-R Series RD77GF16 all versions

MELSEC iQ-R Series RD77GF32 all versions

MELSEC iQ-L Series LD78G4 all versions

MELSEC iQ-L Series LD78G16 all versions

MELSEC Q Series Q172DSCPU all versions

MELSEC Q Series Q173DSCPU all versions

MELSEC Q Series Q170MSCPU all versions

MELSEC Q Series QD77MS2 all versions

MELSEC Q Series QD77MS4 all versions

MELSEC Q Series QD77MS16 all versions

MELSEC Q Series QD77GF4 all versions

MELSEC Q Series QD77GF8 all versions

MELSEC Q Series QD77GF16 all versions

MELSEC L Series LD77MS2 all versions

MELSEC L Series LD77MS4 all versions

MELSEC L Series LD77MS16 all versions

Mitsubishi Electric CNC M800V Series M800VW System Number BND-2051W000 all versions

Mitsubishi Electric CNC M800V Series M800VS System Number BND-2052W000 all versions

Mitsubishi Electric CNC M80V Series M80V System Number BND-2053W000 all versions

Mitsubishi Electric CNC M80V Series M80VW System Number BND-2054W000 all versions

Mitsubishi Electric CNC M800 Series M800W System Number BND-2005W000 all versions

Mitsubishi Electric CNC M800 Series M800S System Number BND-2006W000 all versions

Mitsubishi Electric CNC M80 Series M80 System Number BND-2007W000 all versions

Mitsubishi Electric CNC M80 Series M80W System Number BND-2008W000all versions

Mitsubishi Electric CNC E80 Series E80 System Number BND-2009W000 all versions

Mitsubishi Electric CNC M700V Series M720VW System Number BND-1015W000 all versions

Mitsubishi Electric CNC M700V Series M730VW System Number BND-1015W000 all versions

Mitsubishi Electric CNC M700V Series M750VW System Number BND-1015W002 all versions

Mitsubishi Electric CNC M700V Series M720VS System Number BND-1012W000 all versions

Mitsubishi Electric CNC M700V Series M730VS System Number BND-1012W000 all versions

Mitsubishi Electric CNC M700V Series M750VS System Number BND-1012W002 all versions

Mitsubishi Electric CNC M70V Series M70V System Number BND-1018W000 all versions

Mitsubishi Electric CNC E70 Series E70 System Number BND-1022W000 all versions

Prerequisites

Unknown

Discovered By

Unknown

PoC Author

Unknown

Metasploit Module

Unknown

Reporter

Unknown

Vendors

mitsubishielectric

Products

References

Canonical

CVE-2023-4699 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4699)

Miscellaneous

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-013_en.pdf

https://jvn.jp/vu/JVNVU94620134/

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-03

Rapid7

Unknown

Unknown

Unknown

None

None

Network

CVE-2023-4699

Description

Add Assessment

CVSS V3 Severity and Metrics

General Information

Vendors

Products

References

Canonical

Miscellaneous

Additional Info

Technical Analysis

Unknown

CVE-2023-4699

Unknown

Unknown

None

None

Network

CVE-2023-4699

Description

Add Assessment

CVSS V3 Severity and Metrics

General Information

Vendors

Products

References

Canonical

Miscellaneous

Additional Info

Technical Analysis

Quick Cookie Notification