Threats tagged 'ghsa-j5vq-rv93-4ff2'

Mitsubishi Electric GENESIS and related products have a weak password recovery mechanism in versions 11.03 and prior (and equivalent versions for related products). The vulnerability arises because the challenge response used to unlock the system is fixed and common to all users. This flaw allows a remote attacker to bypass authentication and potentially disclose, tamper with, destroy, or delete internal information, or cause a denial-of-service condition.