CVE-2023-2062 Information Disclosure vulnerability in EtherNet/IP Configuration tools

Medium 6.2 Published 2 Jun 2023 Updated 5 Mar 2025

Remote attackers can view masked passwords in Mitsubishi EtherNet/IP configuration tools, enabling unauthorized FTP access to industrial network modules.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-2062?

CVE-2023-2062 is a medium-severity vulnerability in Mitsubishi Electric Corporation EtherNet/IP Configuration tool for FX5-ENET/IP SW1DNN-EIPCTFX5-BD, published on 2 Jun 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP.

Weakness: CWE-668, CWE-549

Which versions are affected by CVE-2023-2062?

It affects 4 products.

Products include Mitsubishielectric Fx5-Enet\/Ip Firmware, Mitsubishielectric Rj71eip91 Firmware, Mitsubishielectric Sw1dnn-Eipct-Bd Firmware, Mitsubishielectric Sw1dnn-Eipctfx5-Bd Firmware.

How do I fix CVE-2023-2062?

No fix has been published for CVE-2023-2062 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-2062 being exploited?

There is no known exploitation of CVE-2023-2062 in the wild and no public exploit code.

Sources

Also known as GHSA-5h4v-fjx7-95cq.