Information Disclosure Vulnerability in MELSEC Series

CVE-2023-0457

What is CVE-2023-0457?

A vulnerability in Mitsubishi Electric's MELSEC iQ-F, iQ-R, Q, and L Series allows attackers to access plaintext password credentials stored in project files. This risk presents a significant threat as remote, unauthenticated attackers could exploit this weakness to gain unauthorized access to FTP or web servers, potentially leading to further compromises within a network. Organizations utilizing these products should take immediate action to mitigate the risks associated with this vulnerability.

References