CVE-2022-33323

Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

Published Feb 2, 2023 CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Description
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-36366 Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Mitsubishielectric Rh-12fh55 Rh-12fh55 Firmware Rh-12fh70 Rh-12fh70 Firmware Rh-12fh85 Rh-12fh85 Firmware Rh-12sdh55 Rh-12sdh55 Firmware Rh-12sdh70 Rh-12sdh70 Firmware Rh-12sdh85 Rh-12sdh85 Firmware Rh-12sqh55 Rh-12sqh55 Firmware Rh-12sqh70 Rh-12sqh70 Firmware Rh-12sqh85 Rh-12sqh85 Firmware Rh-20fh100 Rh-20fh100 Firmware Rh-20fh85 Rh-20fh85 Firmware Rh-20sdh100 Rh-20sdh100 Firmware Rh-20sdh85 Rh-20sdh85 Firmware Rh-20sqh85 Rh-20sqh85 Firmware Rh-3fh35 Rh-3fh35 Firmware Rh-3fh45 Rh-3fh45 Firmware Rh-3fh55 Rh-3fh55 Firmware Rh-3sdhr Rh-3sdhr Firmware Rh-3sqhr Rh-3sqhr Firmware Rh-6fh35 Rh-6fh35 Firmware Rh-6fh45 Rh-6fh45 Firmware Rh-6fh55 Rh-6fh55 Firmware Rh-6sdh35 Rh-6sdh35 Firmware Rh-6sdh45 Rh-6sdh45 Firmware Rh-6sdh55 Rh-6sdh55 Firmware Rh-6sqh35 Rh-6sqh35 Firmware Rh-6sqh45 Rh-6sqh45 Firmware Rh-6sqh55 Rh-6sqh55 Firmware Rv-12sd Rv-12sd Firmware Rv-12sdl Rv-12sdl Firmware Rv-12sq Rv-12sq Firmware Rv-12sql Rv-12sql Firmware Rv-13f Rv-13f Firmware Rv-13fl Rv-13fl Firmware Rv-20f Rv-20f Firmware Rv-2f Rv-2f Firmware Rv-2sdb Rv-2sdb Firmware Rv-2sqb Rv-2sqb Firmware Rv-3sd Rv-3sd Firmware Rv-3sdj Rv-3sdj Firmware Rv-3sq Rv-3sq Firmware Rv-3sqj Rv-3sqj Firmware Rv-4f Rv-4f Firmware Rv-4fl Rv-4fl Firmware Rv-6sd Rv-6sd Firmware Rv-6sdl Rv-6sdl Firmware Rv-6sq Rv-6sq Firmware Rv-6sql Rv-6sql Firmware Rv-7f Rv-7f Firmware Rv-7fl Rv-7fl Firmware Rv-7fll Rv-7fll Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
Mitsubishi
Published
Updated
Mar 26, 2025, 6:43 PM
Reserved
Jun 14, 2022, 5:50 PM
Status
Modified
Published
Feb 2, 2023, 6:15 AM
Modified
Jun 17, 2026, 4:49 AM