SARA / Free Tools / CVE / CVE-2023-4699

CVE-2023-4699 — Missing Authentication for Critical Function vulnerability in Mitsubishi Electri

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M

CVSS
10.0 CRITICAL
EPSS
0.91% (top 24.30%)
CWE
CWE-306
Published
2023-11-06T05:02:15.543Z
Last modified
2025-12-16T18:23:26.501Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

01What is this vulnerability?

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishi Electric CNC M800/M80/E80 series and Mitsubishi Electric CNC M700V/M70V/E70 series allows a…

02Affected products

VendorProductVersions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MT/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MT/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MT/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MT/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MT/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MT/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MR/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MR/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MR/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MR/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MR/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MR/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MT/ESS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MT/ESS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MT/ESS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MT/ESS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MT/ESS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MT/ESS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MT/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MT/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MT/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MT/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MT/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MT/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MR/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MR/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MR/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MR/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MR/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MR/DS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MT/DSS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MT/DSS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MT/DSS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MT/DSS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MT/DSS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MT/DSS — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MR/UA1 — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MR/UA1 — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MS/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MS/ES — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MT/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MT/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MT/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MT/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-80MT/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-128MT/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-16MR/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-32MR/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-48MR/ES-A — all versions
Mitsubishi Electric CorporationMELSECF Series FX3U-64MR/ES-A — all versions

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →