CVE-2023-2063 File upload in MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP

Medium 6.3 Published 2 Jun 2023 Updated 5 Mar 2025

Remote unauthenticated attackers can upload dangerous files to Mitsubishi EtherNet/IP modules, leading to information disclosure, tampering, or deletion.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-2063?

CVE-2023-2063 is a medium-severity vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP, published on 2 Jun 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks.

Weakness: CWE-434

Which versions are affected by CVE-2023-2063?

It affects 4 products.

Products include Mitsubishielectric Fx5-Enet\/Ip Firmware, Mitsubishielectric Rj71eip91 Firmware, Mitsubishielectric Sw1dnn-Eipct-Bd Firmware, Mitsubishielectric Sw1dnn-Eipctfx5-Bd Firmware.

How do I fix CVE-2023-2063?

No fix has been published for CVE-2023-2063 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-2063 being exploited?

There is no known exploitation of CVE-2023-2063 in the wild and no public exploit code.

Sources

Also known as GHSA-vxj5-594h-676r.