Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Mitsubishi Electric Corporation MITSUBISHI CNC M800V Series M800VW
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M800V Series M800VS
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M80V Series M80V
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M80V Series M80VW
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M800 Series M800W
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M800 Series M800S
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M80 Series M80
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M80 Series M80W
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC E80 Series E80
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC C80 Series C80
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M720VW
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M730VW
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M750VW
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M720VS
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M730VS
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M750VS
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC M70V Series M70V
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC E70 Series E70
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC IoT Unit Remote Service Gateway Unit
Version range not reported
- Mitsubishi Electric Corporation MITSUBISHI CNC IoT Unit Data Acquisition Unit
System Number BND-2041W002 all versions