CVE-2023-2063

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-206306.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206326.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206336.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206346.7In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege withCVE-2023-206354.4In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with SCVE-2023-206366.7In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2023-206376.7In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206386.7In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206396.7In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-20649.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace allows SQL InCVE-2023-206406.7In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206416.7In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System
CVE-2023-2063: High severity, CVSS 7.3 | Vulnix