Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to bypass authentication by sending specially crafted packets and connect to the products illegally.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| mitsubishielectric | ezsocket | 3.0 | - |
| mitsubishielectric | fr_configurator2 | - |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
10
Affected Products
6
References
mitsubishielectric / ezsocket
| - |
| mitsubishielectric | got1000 | - | - |
| mitsubishielectric | got2000 | - | - |
| mitsubishielectric | gx_works2 | 1.11m | - |
| mitsubishielectric | gx_works3 | - | - |
| mitsubishielectric | mc_works64 | - | - |
| mitsubishielectric | melsoft_navigator | 1.04e | - |
| mitsubishielectric | mt_works2 | - | - |
| mitsubishielectric | mx_component | 4.00a | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability
Impact