CVE-2022-33323— Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

遗留的调试代码

Mitsubishi Electric MELFA Robot Controllers 安全漏洞

Mitsubishi Electric MELFA Robot Controllers是日本三菱电机（Mitsubishi Electric）公司的高精度机械臂控制器。 Mitsubishi Electric MELFA Robot Controllers存在安全漏洞，该漏洞源于存在由活动调试代码引起的身份验证绕过漏洞，攻击者可以通过执行未经授权的登录来获得对机器人控制器的未经授权访问。

N/A

N/A