CVE-2023-2846 - CVE House

Status published High CVE-2023-2846

Authentication Bypass Vulnerability in MELSEC-F Series main module

7.5 CVSS

Vulnerability Description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-2846

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

CVE-2025-8531

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Medium 6.8

CVE-2025-7731

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

High 7.5

CVE-2025-7405

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

High 7.3

CVE-2025-7376

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Medium 5.9

CVE-2025-5514

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Medium 5.3

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

MELSEC-F Series FX3U-16MR/ES, MELSEC-F Series FX3U-16MT/ES, MELSEC-F Series FX3U-16MT/ESS, MELSEC-F Series FX3U-32MR/ES, MELSEC-F Series FX3U-32MT/ES, MELSEC-F Series FX3U-32MT/ESS, MELSEC-F Series FX3U-48MR/ES, MELSEC-F Series FX3U-48MT/ES, MELSEC-F Series FX3U-48MT/ESS, MELSEC-F Series FX3U-64MR/ES, MELSEC-F Series FX3U-64MT/ES, MELSEC-F Series FX3U-64MT/ESS, MELSEC-F Series FX3U-80MR/ES, MELSEC-F Series FX3U-80MT/ES, MELSEC-F Series FX3U-80MT/ESS, MELSEC-F Series FX3U-128MR/ES, MELSEC-F Series FX3U-128MT/ES, MELSEC-F Series FX3U-128MT/ESS, MELSEC-F Series FX3U-16MR/DS, MELSEC-F Series FX3U-16MT/DS, MELSEC-F Series FX3U-16MT/DSS, MELSEC-F Series FX3U-32MR/DS, MELSEC-F Series FX3U-32MT/DS, MELSEC-F Series FX3U-32MT/DSS, MELSEC-F Series FX3U-48MR/DS, MELSEC-F Series FX3U-48MT/DS, MELSEC-F Series FX3U-48MT/DSS, MELSEC-F Series FX3U-64MR/DS, MELSEC-F Series FX3U-64MT/DS, MELSEC-F Series FX3U-64MT/DSS, MELSEC-F Series FX3U-80MR/DS, MELSEC-F Series FX3U-80MT/DS, MELSEC-F Series FX3U-80MT/DSS, MELSEC-F Series FX3U-32MR/UA1, MELSEC-F Series FX3U-64MR/UA1, MELSEC-F Series FX3U-32MS/ES, MELSEC-F Series FX3U-64MS/ES, MELSEC-F Series FX3U-16MR/ES-A, MELSEC-F Series FX3U-16MT/ES-A, MELSEC-F Series FX3U-32MR/ES-A, MELSEC-F Series FX3U-32MT/ES-A, MELSEC-F Series FX3U-48MR/ES-A, MELSEC-F Series FX3U-48MT/ES-A, MELSEC-F Series FX3U-64MR/ES-A, MELSEC-F Series FX3U-64MT/ES-A, MELSEC-F Series FX3U-80MR/ES-A, MELSEC-F Series FX3U-80MT/ES-A, MELSEC-F Series FX3U-128MR/ES-A, MELSEC-F Series FX3U-128MT/ES-A, MELSEC-F Series FX3UC-16MT/D, MELSEC-F Series FX3UC-32MT/D, MELSEC-F Series FX3UC-64MT/D, MELSEC-F Series FX3UC-96MT/D, MELSEC-F Series FX3UC-16MT/DSS, MELSEC-F Series FX3UC-32MT/DSS, MELSEC-F Series FX3UC-64MT/DSS, MELSEC-F Series FX3UC-96MT/DSS, MELSEC-F Series FX3UC-16MR/D-T, MELSEC-F Series FX3UC-16MR/DS-T, MELSEC-F Series FX3UC-32MT-LT, MELSEC-F Series FX3UC-32MT-LT-2, MELSEC-F Series FX3UC-16MT/D-P4, MELSEC-F Series FX3UC-16MT/DSS-P4, MELSEC-F Series FX3G-14MR/ES, MELSEC-F Series FX3G-14MT/ES, MELSEC-F Series FX3G-14MT/ESS, MELSEC-F Series FX3G-24MR/ES, MELSEC-F Series FX3G-24MT/ES, MELSEC-F Series FX3G-24MT/ESS, MELSEC-F Series FX3G-40MR/ES, MELSEC-F Series FX3G-40MT/ES, MELSEC-F Series FX3G-40MT/ESS, MELSEC-F Series FX3G-60MR/ES, MELSEC-F Series FX3G-60MT/ES, MELSEC-F Series FX3G-60MT/ESS, MELSEC-F Series FX3G-14MR/DS, MELSEC-F Series FX3G-14MT/DS, MELSEC-F Series FX3G-14MT/DSS, MELSEC-F Series FX3G-24MR/DS, MELSEC-F Series FX3G-24MT/DS, MELSEC-F Series FX3G-24MT/DSS, MELSEC-F Series FX3G-40MR/DS, MELSEC-F Series FX3G-40MT/DS, MELSEC-F Series FX3G-40MT/DSS, MELSEC-F Series FX3G-60MR/DS, MELSEC-F Series FX3G-60MT/DS, MELSEC-F Series FX3G-60MT/DSS, MELSEC-F Series FX3G-14MR/ES-A, MELSEC-F Series FX3G-14MT/ES-A, MELSEC-F Series FX3G-24MR/ES-A, MELSEC-F Series FX3G-24MT/ES-A, MELSEC-F Series FX3G-40MR/ES-A, MELSEC-F Series FX3G-40MT/ES-A, MELSEC-F Series FX3G-60MR/ES-A, MELSEC-F Series FX3G-60MT/ES-A, MELSEC-F Series FX3GC-32MT/D, MELSEC-F Series FX3GC-32MT/DSS, MELSEC-F Series FX3GE-24MR/ES, MELSEC-F Series FX3GE-24MT/ES, MELSEC-F Series FX3GE-24MT/ESS, MELSEC-F Series FX3GE-40MR/ES, MELSEC-F Series FX3GE-40MT/ES, MELSEC-F Series FX3GE-40MT/ESS, MELSEC-F Series FX3GE-24MR/DS, MELSEC-F Series FX3GE-24MT/DS, MELSEC-F Series FX3GE-24MT/DSS, MELSEC-F Series FX3GE-40MR/DS, MELSEC-F Series FX3GE-40MT/DS, MELSEC-F Series FX3GE-40MT/DSS, MELSEC-F Series FX3GA-24MR-CM, MELSEC-F Series FX3GA-24MT-CM, MELSEC-F Series FX3GA-40MR-CM, MELSEC-F Series FX3GA-40MT-CM, MELSEC-F Series FX3GA-60MR-CM, MELSEC-F Series FX3GA-60MT-CM, MELSEC-F Series FX3S-10MR/DS, MELSEC-F Series FX3S-10MR/ES, MELSEC-F Series FX3S-10MT/DS, MELSEC-F Series FX3S-10MT/DSS, MELSEC-F Series FX3S-10MT/ES, MELSEC-F Series FX3S-10MT/ESS, MELSEC-F Series FX3S-14MR/DS, MELSEC-F Series FX3S-14MR/ES, MELSEC-F Series FX3S-14MT/DS, MELSEC-F Series FX3S-14MT/DSS, MELSEC-F Series FX3S-14MT/ES, MELSEC-F Series FX3S-14MT/ESS, MELSEC-F Series FX3S-20MR/DS, MELSEC-F Series FX3S-20MR/ES, MELSEC-F Series FX3S-20MT/DS, MELSEC-F Series FX3S-20MT/DSS, MELSEC-F Series FX3S-20MT/ES, MELSEC-F Series FX3S-20MT/ESS, MELSEC-F Series FX3S-30MR/DS, MELSEC-F Series FX3S-30MR/ES, MELSEC-F Series FX3S-30MT/DS, MELSEC-F Series FX3S-30MT/DSS, MELSEC-F Series FX3S-30MT/ES, MELSEC-F Series FX3S-30MT/ESS, MELSEC-F Series FX3S-30MR/ES-2AD, MELSEC-F Series FX3S-30MT/ES-2AD, MELSEC-F Series FX3S-30MT/ESS-2AD, MELSEC-F Series FX3SA-10MR-CM, MELSEC-F Series FX3SA-10MT-CM, MELSEC-F Series FX3SA-14MR-CM, MELSEC-F Series FX3SA-14MT-CM, MELSEC-F Series FX3SA-20MR-CM, MELSEC-F Series FX3SA-20MT-CM, MELSEC-F Series FX3SA-30MR-CM, MELSEC-F Series FX3SA-30MT-CM

Vulnerable Versions:

all versions

Timeline

Official Publish: June 30th, 2023

Last Modified: March 5th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-294

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.