PT-2024-1489 · Mitsubishi · Melsec Ws Series Ws0-Geth00200

Published 2024-01-30 · Updated 2025-08-28 · CVE-2023-6374

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MELSEC WS Series WS0-GETH00200 all serial numbers

Description The issue is related to an authentication bypass vulnerability in the MELSEC WS Series WS0-GETH00200, allowing a remote unauthenticated attacker to bypass the authentication process by using a capture-replay attack. This could enable the attacker to illegally log in to the affected module and potentially disclose or tamper with programs and parameters in the modules.

Recommendations As a temporary workaround, consider restricting access to the affected module until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the affected module for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-294

Related Identifiers

BDU:2024-00997

CVE-2023-6374

Affected Products

Melsec Ws Series Ws0-Geth00200

References · 12

• https://mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-019_en.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00997 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6374 · Security Note
• https://t.me/cvenotify/69194 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-030-03 · Note
• https://twitter.com/dailycve/status/1961172926096679096 · Twitter Post
• https://twitter.com/RedPacketSec/status/1752634087255187748 · Twitter Post
• https://t.me/cvenotify/70290 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1752297133682667574 · Twitter Post
• https://t.me/cvenotify/69297 · Telegram Post
• https://twitter.com/NUYTSTECH/status/1761928965181395173 · Twitter Post
• https://jvn.jp/vu/JVNVU99497477 · Note