Remote Authentication Bypass Vulnerability Affects Mitsubishi Electric Products
CVE-2023-6815

6.5MEDIUM

Key Information:

Vendor: Mitsubishi Electric Corporation
Status: MELSEC iQ-R Series Safety CPU R08SFCPU; MELSEC iQ-R Series Safety CPU R16SFCPU; MELSEC iQ-R Series Safety CPU R32SFCPU; MELSEC iQ-R Series Safety CPU R120SFCPU
Vendor: CVE Published:; 13 February 2024

🔔 Create Mitsubishi Electric Corporation Vulnerability Alert

What is CVE-2023-6815?

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch