CVE-2022-33323: Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series
Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-771 of RV-2SD
Affected: Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-771 of RV-2SD · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 68% of scored CVEs
DescriptionCVE.org
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-771 of RV-2SDS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-771 of RV-2SDBS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-721 of RV-3SD-SMS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDCS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDBS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDB-SMS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDBCS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJ-SMS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJCS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJBS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJB-SMS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJBCS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDCS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDLS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDLCS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR3D-711M of RV-6SDC-SMS7x and prior
- Mitsubishi Electric Corporation · MELFA SD/SQ Series Controller CR3D-711M of RV-6SDLC-SMS7x and prior
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- February 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2022-33323 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.