Approved changes feed: RSS · Atom

cpe:2.3:o:mitsubishielectric:sw1dnn-eipctfx5-bd_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorMitsubishielectric (4baed789-ac20-5dd5-8550-a965394bc219)
ProductSw1Dnn Eipctfx5 Bd Firmware (d5b963e5-a7f7-570d-93f2-a4195f39f097)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2063 vulnerable 2026-06-08 06:02:41.352020 Information disclosure, tampering, deletion and destruction vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules
MEDIUM (6.3)
Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks.
Published: 2023-06-02T04:05:38.109Z
Updated: 2025-03-05T18:58:08.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2062 vulnerable 2026-06-08 06:02:41.350718 Information Disclosure vulnerability in EtherNet/IP Configuration tools
MEDIUM (6.2)
Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.
Published: 2023-06-02T04:04:28.648Z
Updated: 2025-03-05T18:58:15.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2061 vulnerable 2026-06-08 06:02:41.346592 Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules
MEDIUM (6.2)
Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.
Published: 2023-06-02T04:03:36.665Z
Updated: 2025-03-05T18:58:23.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2060 vulnerable 2026-06-08 06:02:41.344799 Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules
HIGH (7.5)
Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing.
Published: 2023-06-02T04:02:32.377Z
Updated: 2025-03-05T18:58:31.287Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.