CVE-2023-4562

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.

• CWE-287
• CWE-287

• https://jvn.jp/vu/JVNVU90509290/Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-13Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-012_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU90509290/Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-13Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-012_en.pdfVendor Advisory

Published

Oct 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45614There are buffer overflow vulnerabilities in the underlying …9.8
• CVE-2023-45615There are buffer overflow vulnerabilities in the underlying …9.8
• CVE-2023-45616There is a buffer overflow vulnerability in the underlying A…9.8
• CVE-2023-45617There are arbitrary file deletion vulnerabilities in the CLI…8.2
• CVE-2023-45618There are arbitrary file deletion vulnerabilities in the Air…8.2
• CVE-2023-45619There is an arbitrary file deletion vulnerability in the RSS…8.2
• CVE-2023-45620Unauthenticated Denial-of-Service (DoS) vulnerabilities exis…7.5
• CVE-2023-45621Unauthenticated Denial-of-Service (DoS) vulnerabilities exis…7.5
• CVE-2023-45622Unauthenticated Denial-of-Service (DoS) vulnerabilities exis…7.5
• CVE-2023-45623Unauthenticated Denial-of-Service (DoS) vulnerabilities exis…7.5
• CVE-2023-45624An unauthenticated Denial-of-Service (DoS) vulnerability exi…7.5
• CVE-2023-45625Multiple authenticated command injection vulnerabilities exi…7.2