Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation...

7.5 CVSS

Vulnerability Description

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to bypass authentication by sending specially crafted packets and connect to the products illegally.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6942

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

CVE-2025-8531

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Medium 6.8

CVE-2025-7731

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

High 7.5

CVE-2025-7405

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

High 7.3

CVE-2025-7376

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Medium 5.9

CVE-2025-5514

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Medium 5.3

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

EZSocket, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, MX OPC Server DA/UA

Vulnerable Versions:

3.0 to 5.92, 1.325P and prior, 1.320J and prior, 1.11M to 1.626C, 1.106L and prior, 1.04E to 2.102G, 1.190Y and prior, 4.00A to 5.007H, all versions