CVE-2023-6374 - CVE House

Back to Database

Status published Medium CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC...

5.9 CVSS

Vulnerability Description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote attacker who has logged in illegally may be able to disclose or tamper with the programs and parameters in the modules.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6374

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

MELSEC WS Series WS0-GETH00200

Vulnerable Versions:

All serial numbers

Timeline

Official Publish: January 30th, 2024

Last Modified: June 9th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.