CVE-2023-2062

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-549CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-206204.1In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execCVE-2023-206216.7In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysCVE-2023-206236.4In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additiCVE-2023-206246.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2023-206256.4In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution priCVE-2023-206266.7In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SysCVE-2023-206276.7In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2023-206286.7In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with SystemCVE-2023-20637.3Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNetCVE-2023-206306.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206326.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206336.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System
CVE-2023-2062: Medium severity, CVSS 6.2 | Vulnix