Skip to main content
← All vulnerabilities
CVE-2023-1424

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ES

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/ES

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/ES

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/ES

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/DS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/DS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/DS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ESS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ESS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ESS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DSS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DSS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DSS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/D

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/D

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/D

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/DSS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/DSS

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS

    versions from 1.220 to 1.281

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS

    versions from 1.220 to 1.281

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS

    versions from 1.220 to 1.281

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R01CPU

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R02CPU

    Version range not reported

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R04CPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08CPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16CPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32CPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120CPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R04ENCPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08ENCPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16ENCPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32ENCPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120ENCPU

    versions from 12 to 68

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08SFCPU

    versions from 26 to 31

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16SFCPU

    versions from 26 to 31

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32SFCPU

    versions from 26 to 31

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120SFCPU

    versions from 26 to 31

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU

    versions from 3 to 37

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16PCPU

    versions from 3 to 37

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32PCPU

    versions from 3 to 37

  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120PCPU

    versions from 3 to 37

References 3

mitsubishielectric.com

jvn.jp

cisa.gov