CVE-2023-6942
Description
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to bypass authentication by sending specially crafted packets and connect to the products illegally.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric ezsocket | 3.0 ≤ v | — |
| mitsubishielectric fr_configurator2 | No range specified | — |
| mitsubishielectric got1000 | No range specified | — |
| mitsubishielectric got2000 | No range specified | — |
| mitsubishielectric gx_works2 | 1.11m ≤ v | — |
| mitsubishielectric gx_works3 | No range specified | — |
| mitsubishielectric mc_works64 | No range specified | — |
| mitsubishielectric melsoft_navigator | 1.04e ≤ v | — |
| mitsubishielectric mt_works2 | No range specified | — |
| mitsubishielectric mx_component | 4.00a ≤ v | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.