CVE-2023-2062: Mitsubishielectric FX5-Enet/ip Firmware

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.

Affected products

• Mitsubishielectric FX5-Enet/ip Firmware: affected versions not specified
• Mitsubishielectric RJ71EIP91 Firmware: affected versions not specified
• Mitsubishielectric SW1DNN-Eipct-Bd Firmware: affected versions not specified
• Mitsubishielectric SW1DNN-EIPCTFX5-Bd Firmware: affected versions not specified

Published 2023-06-02. Last modified 2026-06-17.