CVE-2023-0457

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-256CWE-522

Affected software

VendorProductVersions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/DSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/DSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/DSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/Dall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/Dall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/Dall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DSSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DSSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DS-TSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS-TSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MR/DS-TSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESSall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ES-Aall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ES-Aall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ES-Aall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ES-Aall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ES-Aall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ES-Aall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MR/ESall versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MR/ESall versions

References

Timeline

Published
Mar 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-04584.7A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlledCVE-2023-04595.5Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_okCVE-2023-04607.3The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created with the flags ConteCVE-2023-04617.8There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulneCVE-2023-04629.1An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operatCVE-2023-04633.3The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022CVE-2023-04647.5A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains tCVE-2023-04655.3Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certCVE-2023-04665.3The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verificaCVE-2023-04674.3The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP teCVE-2023-04684.7A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race coCVE-2023-04695.5A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during cal
CVE-2023-0457: High severity, CVSS 7.5 | Vulnix