CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote attacker who has logged in illegally may be able to disclose or tamper with the programs and parameters in the modules.

• CWE-294

• https://jvn.jp/vu/JVNVU99497477Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-03Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-019_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU99497477Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-03Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-019_en.pdfVendor Advisory

Published

Jan 30, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6366 In WhatsUp Gold versions released before 2023.1, a stored c…5.4
• CVE-2023-6367 In WhatsUp Gold versions released before 2023.1, a stored c…5.4
• CVE-2023-6368In WhatsUp Gold versions released before 2023.1, an API endp…5.3
• CVE-2023-6369The Export WP Page to Static HTML/CSS plugin for WordPress i…5.4
• CVE-2023-6371An issue has been discovered in GitLab CE/EE affecting all v…5.4
• CVE-2023-6373The ArtPlacer Widget WordPress plugin before 2.20.7 does not…8.8
• CVE-2023-6375Tyler Technologies Court Case Management Plus may store back…7.5
• CVE-2023-6376Henschen & Associates court document management software doe…7.5
• CVE-2023-6377A flaw was found in xorg-server. Querying or changing XKB bu…7.8
• CVE-2023-6378A serialization vulnerability in logback receiver component …7.5
• CVE-2023-6379Cross-site scripting (XSS) vulnerability in Alkacon Software…6.1
• CVE-2023-6380Open redirect vulnerability has been found in the Open CMS p…6.1