9.1
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.
Засегнати продукти
- Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08SFCPU: Firmware versions "26" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R16SFCPU: Firmware versions "26" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R32SFCPU: Firmware versions "26" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R series Safety CPU R120SFCPU: Firmware versions "26" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU: Firmware versions "11" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R16PSFCPU: Firmware versions "11" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R32PSFCPU: Firmware versions "11" and prior
- Mitsubishi Electric Corporation MELSEC iQ-R series SIL2 Process CPU R120PSFCPU: Firmware versions "11" and prior
- mitsubishielectric melsec_iq-r08sfcpu: -
- mitsubishielectric r16sfcpu: -
- mitsubishielectric r32sfcpu: -
- mitsubishielectric r120sfcpu: -
- mitsubishielectric r08psfcpu: -
- mitsubishielectric r16psfcpu: -
- mitsubishielectric r32psfcpu: -
- mitsubishielectric r120psfcpu: -
Вид слабост
История
- 14 октомври 2021 Публикувано