Approved changes feed: RSS · Atom

cpe:2.3:o:mitsubishielectric:fx5-enet\/ip_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorMitsubishielectric (4baed789-ac20-5dd5-8550-a965394bc219)
ProductFx5 Enet/Ip Firmware (558bbd29-123e-5e5b-95a2-4dd2aaf5b42c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2063 vulnerable 2026-06-08 06:02:41.351691 Information disclosure, tampering, deletion and destruction vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules
MEDIUM (6.3)
Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks.
Published: 2023-06-02T04:05:38.109Z
Updated: 2025-03-05T18:58:08.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2062 vulnerable 2026-06-08 06:02:41.350140 Information Disclosure vulnerability in EtherNet/IP Configuration tools
MEDIUM (6.2)
Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.
Published: 2023-06-02T04:04:28.648Z
Updated: 2025-03-05T18:58:15.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2061 vulnerable 2026-06-08 06:02:41.346185 Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules
MEDIUM (6.2)
Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.
Published: 2023-06-02T04:03:36.665Z
Updated: 2025-03-05T18:58:23.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2060 vulnerable 2026-06-08 06:02:41.339853 Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules
HIGH (7.5)
Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing.
Published: 2023-06-02T04:02:32.377Z
Updated: 2025-03-05T18:58:31.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0457 vulnerable 2026-06-08 05:52:05.120012 Information Disclosure Vulnerability in MELSEC Series
HIGH (7.5)
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
Published: 2023-03-03T04:18:15.787Z
Updated: 2025-03-05T20:02:32.364Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.