CVE-2023-0457: Mitsubishielectric FX5-Enet/ip Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.

Affected products

• Mitsubishielectric FX5-Enet/ip Firmware: affected versions not specified
• Mitsubishielectric FX5-Enet Firmware: affected versions not specified
• Mitsubishielectric FX5S-30mr/es Firmware: any version
• Mitsubishielectric FX5S-30mt/es Firmware: any version
• Mitsubishielectric FX5S-30mt/ess Firmware: any version
• Mitsubishielectric FX5S-40mr/es Firmware: any version
• Mitsubishielectric FX5S-40mt/es Firmware: any version
• Mitsubishielectric FX5S-40mt/ess Firmware: any version
• Mitsubishielectric FX5S-60mr/es Firmware: any version
• Mitsubishielectric FX5S-60mt/es Firmware: any version
• Mitsubishielectric FX5S-60mt/ess Firmware: any version
• Mitsubishielectric FX5S-80mr/es Firmware: any version
• Mitsubishielectric FX5S-80mt/es Firmware: any version
• Mitsubishielectric FX5S-80mt/ess Firmware: any version
• Mitsubishielectric FX5UC-32mr/ds-Ts Firmware: any version
• Mitsubishielectric FX5UC-32mt/d Firmware: any version
• Mitsubishielectric FX5UC-32mt/ds-Ts Firmware: any version
• Mitsubishielectric FX5UC-32mt/dss-Ts Firmware: any version
• Mitsubishielectric FX5UC-32mt/dss Firmware: any version
• Mitsubishielectric FX5UC-64mt/d Firmware: any version
• Mitsubishielectric FX5UC-64mt/dss Firmware: any version
• Mitsubishielectric FX5UC-96mt/d Firmware: any version
• Mitsubishielectric FX5UC-96mt/dss Firmware: any version
• Mitsubishielectric FX5UJ-24mr/es-A Firmware: any version
• Mitsubishielectric FX5UJ-24mr/es Firmware: any version
• and 13 more

Published 2023-03-03. Last modified 2026-06-17.