ghsa-r5w8-hf4h-f29v
Vulnerability from github
Published
2024-02-13 09:30
Modified
2024-02-13 09:30
Severity
Details
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet.
{ "affected": [], "aliases": [ "CVE-2023-6815" ], "database_specific": { "cwe_ids": [ "CWE-266" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-13T07:15:46Z", "severity": "MODERATE" }, "details": "Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet.", "id": "GHSA-r5w8-hf4h-f29v", "modified": "2024-02-13T09:30:31Z", "published": "2024-02-13T09:30:31Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6815" }, { "type": "WEB", "url": "https://jvn.jp/vu/JVNVU95085830/index.html" }, { "type": "WEB", "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-021_en.pdf" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "type": "CVSS_V3" } ] }
Loading...