cve/2023/CVE-2023-0457.md

128 lines
12 KiB
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-0457](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0457)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5-ENET%2FIP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5-ENET&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-30MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-30MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-30MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-40MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-40MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-40MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-60MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-60MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-60MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-80MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-80MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5S-80MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-32MR%2FDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-32MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-32MT%2FDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-32MT%2FDSS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-32MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-32MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-64MR%2FDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-64MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-64MT%2FDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-64MT%2FDSS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-64MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-64MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-80MR%2FDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-80MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-80MT%2FDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-80MT%2FDSS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-80MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5U-80MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-32MR%2FDS-TS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-32MT%2FD&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-32MT%2FDS-TS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-32MT%2FDSS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-32MT%2FDSS-TS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-64MT%2FD&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-64MT%2FDSS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-96MT%2FD&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UC-96MT%2FDSS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-24MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-24MR%2FES-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-24MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-24MT%2FES-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-24MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-40MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-40MR%2FES-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-40MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-40MT%2FES-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-40MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-60MR%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-60MR%2FES-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-60MT%2FES&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-60MT%2FES-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-F%20Series%20FX5UJ-60MT%2FESS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R00CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R01CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R02CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R04CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R04ENCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R08CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R08ENCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R08PCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R08PSFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R08SFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R120CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R120ENCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R120PCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R120PSFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R120SFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R12CCPU-V&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R16CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R16ENCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R16PCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R16PSFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R16SFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R32CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R32ENCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R32PCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R32PSFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20R32SFCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC%20iQ-R%20Series%20RJ71EN71&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L02CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L02CPU-P&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L06CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L06CPU-P&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L26CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L26CPU-BT&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L26CPU-P&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20L26CPU-PBT&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-L%20Series%20LJ71E71-100&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q03UDECPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q03UDVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q04UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q04UDPVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q04UDVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q06UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q06UDPVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q06UDVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q100UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q10UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q13UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q13UDPVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q13UDVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q20UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q26UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q26UDPVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q26UDVCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20Q50UDEHCPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MELSEC-Q%20Series%20QJ71E71-100&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20all%20versions%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-256%20Plaintext%20Storage%20of%20a%20Password&color=brighgreen)
### Description
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/goheea/goheea