CVE-2023-6815

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet.

• CWE-266

• https://jvn.jp/vu/JVNVU95085830/index.htmlThird Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-044-01Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-021_en.pdfMitigation, Vendor Advisory
• https://jvn.jp/vu/JVNVU95085830/index.htmlThird Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-044-01Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-021_en.pdfMitigation, Vendor Advisory

Published

Feb 13, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6809The Custom fields shortcode plugin for WordPress is vulnerab…5.4
• CVE-2023-6810The ClickCease Click Fraud Protection plugin for WordPress i…4.3
• CVE-2023-6811The Language Translate Widget for WordPress – ConveyThis plu…7.2
• CVE-2023-6812The WP Compress – Image Optimizer [All-In-One plugin for Wor…6.1
• CVE-2023-6813The Login by Auth0 plugin for WordPress is vulnerable to Ref…6.1
• CVE-2023-6814Insertion of Sensitive Information into Log File vulnerabili…5.6
• CVE-2023-6816A flaw was found in X.Org server. Both DeviceFocusEvent and …9.8
• CVE-2023-6817A use-after-free vulnerability in the Linux kernel's netfilt…7.8
• CVE-2023-6818Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-6819Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-6820Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-6821The Error Log Viewer by BestWebSoft WordPress plugin before …6.5