Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP serve
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server.
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-32MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-64MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-80MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-32MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-64MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-80MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-32MT/DS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-64MT/DS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-80MT/DS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-32MR/DS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-64MR/DS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-80MR/DS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-32MT/ESS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-64MT/ESS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-80MT/ESS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-32MT/DSS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-64MT/DSS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5U-80MT/DSS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-32MT/D — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-64MT/D — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-96MT/D — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-32MT/DSS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-64MT/DSS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-96MT/DSS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-32MT/DS-TS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-32MT/DSS-TS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UC-32MR/DS-TS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-24MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-40MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-60MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-24MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-40MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-60MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-24MT/ESS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-40MT/ESS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-60MT/ESS — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-24MT/ES-A — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-40MT/ES-A — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-60MT/ES-A — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-24MR/ES-A — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-40MR/ES-A — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5UJ-60MR/ES-A — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-30MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-40MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-60MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-80MT/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-30MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-40MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-60MR/ES — all versions |
| Mitsubishi Electric Corporation | MELSEC iQ | F Series FX5S-80MR/ES — all versions |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.