CVE-2023-4699

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishi Electric CNC M800/M80/E80 series and Mitsubishi Electric CNC M700V/M70V/E70 series allows a remote unauthenticated attacker to execute arbitrary commands by sending specific packets to the affected products. This could lead to disclose or tamper with information by reading or writing control programs, or cause a denial-of-service (DoS) condition on the products by resetting the memory contents of the products to factory settings or resetting the products remotely.

• CWE-306
• CWE-345

• https://jvn.jp/vu/JVNVU94620134/Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-03Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-013_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU94620134/Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-03Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-013_en.pdfVendor Advisory

Published

Nov 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4698Improper Input Validation in GitHub repository usememos/memo…7.5
• CVE-2023-46980An issue in Best Courier Management System v.1.0 allows a re…9.8
• CVE-2023-46981SQL injection vulnerability in Novel-Plus v.4.2.0 allows a r…9.8
• CVE-2023-46987SeaCMS v12.9 was discovered to contain a remote code executi…8.8
• CVE-2023-46988Path Traversal vulnerability in ONLYOFFICE Document Server b…6.7
• CVE-2023-46989SQL Injection vulnerability in the Innovadeluxe Quick Order …7.8
• CVE-2023-46990Deserialization of Untrusted Data in PublicCMS v.4.0.202302.…9.8
• CVE-2023-46992TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Inc…7.5
• CVE-2023-46993In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with…9.8
• CVE-2023-46998Cross Site Scripting vulnerability in BootBox Bootbox.js v.3…6.1
• CVE-2023-4700An authorization issue affecting GitLab EE affecting all ver…6.5
• CVE-2023-47003An issue in RedisGraph v.2.12.10 allows an attacker to execu…9.8