Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

认证机制不恰当

Mitsubishi Electric MELSEC-F Series 授权问题漏洞

Mitsubishi Electric MELSEC-F Series是日本三菱电机（Mitsubishi Electric）公司的工控设备具有模拟和通信功能可扩展性的基本微型 PLC。 Mitsubishi Electric MELSEC-F Series 存在安全漏洞，该漏洞源于主模块存在身份验证错误漏洞。攻击者可利用该漏洞通过发送非法消息，从产品中获取序列程序或写入恶意程序。

N/A

N/A