CVE-2023-6374

MEDIUM

Mitsubishi Electric Corporation MELSEC WS Series - Auth Bypass

Title source: llm
STIX 2.1

Description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote attacker who has logged in illegally may be able to disclose or tamper with the programs and parameters in the modules.

Scores

CVSS v3 5.9
EPSS 0.0089
EPSS Percentile 75.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-294
Status published
Products (1)
mitsubishielectric/melsec_ws0-geth00200_firmware
Published Jan 30, 2024
Tracked Since Feb 18, 2026