CVE-2023-2061 Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

Medium 6.2 Published 2 Jun 2023 Updated 5 Mar 2025

Remote attackers can bypass authentication and access Mitsubishi EtherNet/IP modules via FTP using a hard-coded password.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-2061?

CVE-2023-2061 is a medium-severity vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP, published on 2 Jun 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.

Weakness: CWE-798, CWE-259

Which versions are affected by CVE-2023-2061?

It affects 4 products.

Products include Mitsubishielectric Fx5-Enet\/Ip Firmware, Mitsubishielectric Rj71eip91 Firmware, Mitsubishielectric Sw1dnn-Eipct-Bd Firmware, Mitsubishielectric Sw1dnn-Eipctfx5-Bd Firmware.

How do I fix CVE-2023-2061?

No fix has been published for CVE-2023-2061 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-2061 being exploited?

There is no known exploitation of CVE-2023-2061 in the wild and no public exploit code.

Sources

Also known as GHSA-2fjm-qc6m-8q8h.