PatchTheCVEfx5-enet\/ip firmware vulnerabilities and fixes
Recent CVEs affecting fx5-enet\/ip firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: fx5 enet\/ip firmware, fx5-enet\/ipfirmware.
fx5-enet\/ip firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-06-02. Highest priority: CVE-2023-2060 (score 46/100).
- CVE-2023-2063 MEDIUM 6.3 MITIGATE MITIGATE Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporati
- CVE-2023-2062 MEDIUM 6.2 MITIGATE MITIGATE Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tool
- CVE-2023-2061 MEDIUM 6.2 MITIGATE MITIGATE Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series
- CVE-2023-2060 HIGH 7.5 MITIGATE MITIGATE Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series
FAQ
How do I fix fx5-enet\/ip firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fx5-enet\/ip firmware being exploited right now?
None of the tracked fx5-enet\/ip firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fx5-enet\/ip firmware CVE should I patch first?
CVE-2023-2060 currently ranks highest (46/100): Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series.