CVE-2022-33323

High

Description

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

SeverityHigh
CVSS7.5
Exploit probability—
ProductMitsubishielectric Rh-12sdh55 Firmware
PublishedFeb 2, 2023
First seenFeb 2, 2023
Weakness typeCWE-489CWE-489

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mitsubishielectric rh-12sdh55_firmwareNo range specified—
mitsubishielectric rh-12sdh70_firmwareNo range specified—
mitsubishielectric rh-12sdh85_firmwareNo range specified—
mitsubishielectric rh-12sqh55_firmwareNo range specified—
mitsubishielectric rh-12sqh70_firmwareNo range specified—
mitsubishielectric rh-12sqh85_firmwareNo range specified—
mitsubishielectric rh-20sdh100_firmwareNo range specified—
mitsubishielectric rh-20sdh85_firmwareNo range specified—
mitsubishielectric rh-20sqh85_firmwareNo range specified—
mitsubishielectric rh-3sdhr_firmwareNo range specified—
mitsubishielectric rh-3sqhr_firmwareNo range specified—
mitsubishielectric rh-6sdh35_firmwareNo range specified—
mitsubishielectric rh-6sdh45_firmwareNo range specified—
mitsubishielectric rh-6sdh55_firmwareNo range specified—
mitsubishielectric rh-6sqh35_firmwareNo range specified—
mitsubishielectric rh-6sqh45_firmwareNo range specified—
mitsubishielectric rh-6sqh55_firmwareNo range specified—
mitsubishielectric rv-12sd_firmwareNo range specified—
mitsubishielectric rv-12sdl_firmwareNo range specified—
mitsubishielectric rv-12sq_firmwareNo range specified—
mitsubishielectric rv-12sql_firmwareNo range specified—
mitsubishielectric rv-2sdb_firmwareNo range specified—
mitsubishielectric rv-2sqb_firmwareNo range specified—
mitsubishielectric rv-3sd_firmwareNo range specified—
mitsubishielectric rv-3sdj_firmwareNo range specified—
mitsubishielectric rv-3sq_firmwareNo range specified—
mitsubishielectric rv-3sqj_firmwareNo range specified—
mitsubishielectric rv-6sd_firmwareNo range specified—
mitsubishielectric rv-6sdl_firmwareNo range specified—
mitsubishielectric rv-6sq_firmwareNo range specified—
mitsubishielectric rv-6sql_firmwareNo range specified—
mitsubishielectric rh-12fh55_firmwareNo range specified—
mitsubishielectric rh-12fh70_firmwareNo range specified—
mitsubishielectric rh-12fh85_firmwareNo range specified—
mitsubishielectric rh-20fh100_firmwareNo range specified—
mitsubishielectric rh-20fh85_firmwareNo range specified—
mitsubishielectric rh-3fh35_firmwareNo range specified—
mitsubishielectric rh-3fh45_firmwareNo range specified—
mitsubishielectric rh-3fh55_firmwareNo range specified—
mitsubishielectric rh-6fh35_firmwareNo range specified—
mitsubishielectric rh-6fh45_firmwareNo range specified—
mitsubishielectric rh-6fh55_firmwareNo range specified—
mitsubishielectric rv-13f_firmwareNo range specified—
mitsubishielectric rv-13fl_firmwareNo range specified—
mitsubishielectric rv-20f_firmwareNo range specified—
mitsubishielectric rv-2f_firmwareNo range specified—
mitsubishielectric rv-4f_firmwareNo range specified—
mitsubishielectric rv-4fl_firmwareNo range specified—
mitsubishielectric rv-7f_firmwareNo range specified—
mitsubishielectric rv-7fl_firmwareNo range specified—
mitsubishielectric rv-7fll_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.