No exploitation reportedFix available

CVE-2023-1618

No exploitation reported by the sources we read.

Published2023-05-19
WeaknessCWE-1188 · CWE-489

Am I affected?

With a domain, we read the version its public headers and pages expose. A distribution build can carry the fix under an older number.

Description

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 **** and prior allows a remote unauthenticated attacker to bypass authentication and illegally log into the affected module by connecting to it via telnet which is hidden function and is enabled by default when shipped from the factory. As a result, a remote attacker with unauthorized login can reset the module, and if certain conditions are met, he/she can disclose or tamper with the module's configuration or rewrite the firmware.

Timeline

dates in UTC

2023-05-1905:15CVE publishedNVD

Observed activity

isMalicious corpus · updated 2026-10-23 21:37 UTC

Indicators tagged with this CVE, per day0 indicators over 7 days

Block these indicators

Firewall list (EDL, text): https://api.ismalicious.com/edl/cve/CVE-2023-1618?format=txt
CSV export: https://api.ismalicious.com/edl/cve/CVE-2023-1618?format=csv
TAXII collection of exploited CVEs
The EDL and CSV take an API key on the Pro plan.

Versions per branch

NVD

Mitsubishielectric melsec ws0-geth00200 firmwareversion to verify

Branch	Affected	Fixed in	Source
—	all versions	no fix published	NVD

as publishedRanges as NVD and OSV publish them; a distribution’s build can be fixed under an older number.

Distribution builds and vendor advisories

Packages from OSV.dev and products from the vendors' CSAF advisories.

version not verifiedVersions not verified: read as OSV.dev and the vendors publish them, not checked against each vendor's release list.

Vendor advisories

ICSA-23-138-02 CISA1 known affected
Mitsubishi Electric MELSEC WS Series
WS0-GETH00200: <= Serial Numbers 2310****

Full record on NVD

Fix

Vendor fix CISA ICSA-23-138-02 · 1 productMitsubishi Electric has released the following versions to fix this vulnerability: WS0-GETH00200: Serial numbers 2311**** and later.
Mitigation from the vendor CISA ICSA-23-138-02 · 1 productFor the affected products, Mitsubishi Electric recommends users to take the following mitigation measures:
Mitigation from the vendor CISA ICSA-23-138-02 · 1 productSet password for telnet sessions that are difficult for third parties to guess. The password can be up to 15 characters long. Note that "[space]" in the input string represents a single-byte space. Users can change the password for the telnet session of the affected product by using the telnet clie…
Mitigation from the vendor CISA ICSA-23-138-02 · 1 productPassword setting: (1) Enter "telnet[space]" followed by the IP address of the affected product and press the Enter key. (2) When "Password" is displayed, press the Enter key without entering anything. (3) When "telnet>" is displayed, enter "password[space]" followed by the desired password string a…
Mitigation from the vendor CISA ICSA-23-138-02 · 1 productConfirm the password is set: (1) After the Password setting process, enter "telnet[space]" followed by the IP address of the affected product and press the Enter key. (2) When "Password" is displayed, enter the password string set in the Password setting process and press the Enter key. (3) If "tel…
Mitigation from the vendor CISA ICSA-23-138-02 · 1 productAlternatively, Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:

Advisories and patches

www.cisa.govMitigation
www.mitsubishielectric.comVendor Advisory

Detection

Nuclei template: none so far
Exploit-DB: no entry
Proof-of-concept repositories: none listed

Sources

CISA-ADPSSVC decisionnone2025-02-12
OpenCVESSVC decisionnone—
CNACVSS 3.17.5read 2026-10-23
NVDCVSS 3.18.6read 2026-10-23
CNAweakness (CWE)CWE-489read 2026-10-23
NVDweakness (CWE)CWE-1188read 2026-10-23
FIRST EPSSEPSS score1.1 %2026-10-23

Technical details

CVSS v3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Published: 2023-05-19
Last Modified: 2026-06-17
NVD status: Modified

Frequently asked questions

What is CVE-2023-1618?

Is CVE-2023-1618 actively exploited?

Active exploitation of CVE-2023-1618 has not been confirmed. Its EPSS score was 1.1% on 2026-10-23, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-1618?

CVE-2023-1618 has a CVSS v3 base score of 8.6 (HIGH severity), with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L.

Hear about the next vulnerability in your software

Surveillance reads the versions in your stack — a domain, a lockfile or a list — checks each CVE against the ranges its sources publish, and alerts you when one you run is exploited or enters CISA KEV. A version it cannot read stays « version not verified ».

Get alerts for this product CISA KEV additions, October 2026 Search CVEs

No credit card required · No monthly cap on website lookups · 250 API requests/month

Go further

Following what attackers exploit right now? The CISA KEV additions of the month, with their patch deadlines.
Running this software? Vulnerability monitoring alerts you to new vulnerabilities in your products.

Related vulnerabilities

Same product first, then the same vendor advisory and the same publication week.

Back to CVE Database