CVE-2022-33323CWE-489

Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

High · published February 2, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01144 · 66.5th percentile
Weakness
CWE-489 · Active Debug Code
Published
2023-02-02T05:49Z
EPSS history
Timeline
  • 02 FEB 05:49Z
    Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series
    cvelistv5