CVE-2022-33323

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

• CWE-489

• https://jvn.jp/vu/JVNVU94588481/index.htmlThird Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU94588481/index.htmlThird Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdfVendor Advisory

Published

Feb 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33318Deserialization of Untrusted Data vulnerability in Mitsubish…9.8
• CVE-2022-33319Out-of-bounds Read vulnerability in Mitsubishi Electric GENE…9.1
• CVE-2022-3332A vulnerability classified as critical has been found in Sou…9.8
• CVE-2022-33320Deserialization of Untrusted Data vulnerability in Mitsubish…7.8
• CVE-2022-33321Cleartext Transmission of Sensitive Information vulnerabilit…9.8
• CVE-2022-33322Cross-site scripting vulnerability in Mitsubishi Electric co…6.1
• CVE-2022-33324Improper Resource Shutdown or Release vulnerability in Mitsu…7.5
• CVE-2022-33325Multiple command injection vulnerabilities exist in the web_…9.8
• CVE-2022-33326Multiple command injection vulnerabilities exist in the web_…9.8
• CVE-2022-33327Multiple command injection vulnerabilities exist in the web_…9.8
• CVE-2022-33328Multiple command injection vulnerabilities exist in the web_…9.8
• CVE-2022-33329Multiple command injection vulnerabilities exist in the web_…9.8