CVE-2023-2846: Mitsubishielectric FX3G-14mr/ds Firmware

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Affected products

• Mitsubishielectric FX3G-14mr/ds Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mr/es-A Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mr/es Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mt/ds Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mt/dss Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mt/es-A Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mt/es Firmware: affected versions not specified
• Mitsubishielectric FX3G-14mt/ess Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mr/ds Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mr/es-A Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mr/es Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mt/ds Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mt/dss Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mt/es-A Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mt/es Firmware: affected versions not specified
• Mitsubishielectric FX3G-24mt/ess Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mr/ds Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mr/es-A Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mr/es Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mt/ds Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mt/dss Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mt/es-A Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mt/es Firmware: affected versions not specified
• Mitsubishielectric FX3G-40mt/ess Firmware: affected versions not specified
• Mitsubishielectric FX3G-60mr/ds Firmware: affected versions not specified
• and 125 more

Published 2023-06-30. Last modified 2026-06-17.