Lucene search

[email protected]NVD:CVE-2023-1424

HistoryMay 24, 2023 - 5:15 a.m.

CVE-2023-1424

2023-05-2405:15:08

CWE-120

[email protected]

web.nvd.nist.gov

mitsubishi electric

melsec

buffer overflow

remote code execution

denial of service

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

JSON

Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Affected configurations

NVD

Node

mitsubishielectricmelsec_iq-fx5u-32mr\/dsMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mr\/ds_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mr\/dssMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mr\/dss_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mr\/esMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mr\/es_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mr\/essMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mr\/ess_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mt\/dsMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mt\/ds_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mt\/dssMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mt\/dss_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mt\/esMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mt\/es_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-32mt\/essMatch-

AND

mitsubishielectricmelsec_iq-fx5u-32mt\/ess_firmwareMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mr\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mr\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mr\/dss_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mr\/dssMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mr\/es_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mr\/esMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mr\/ess_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mr\/essMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mt\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mt\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mt\/dss_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mt\/dssMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mt\/es_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mt\/esMatch-

Node

mitsubishielectricmelsec_iq-fx5u-64mt\/ess_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-64mt\/essMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mr\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mr\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mr\/dss_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mr\/dssMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mr\/es_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mr\/esMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mr\/ess_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mr\/essMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mt\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mt\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mt\/dss_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mt\/dssMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mt\/es_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mt\/esMatch-

Node

mitsubishielectricmelsec_iq-fx5u-80mt\/ess_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5u-80mt\/essMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mr\/dds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mr\/ddsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mr\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mr\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mr\/ds-ts_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mr\/ds-tsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mt\/dds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mt\/ddsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mt\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mt\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mt\/dss-ts_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mt\/dss-tsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-32mt\/ds-ts_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-32mt\/ds-tsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-64mr\/dds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-64mr\/ddsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-64mr\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-64mr\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-64mt\/dds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-64mt\/ddsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-64mt\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-64mt\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-96mr\/dds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-96mr\/ddsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-96mr\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-96mr\/dsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-96mt\/dds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-96mt\/ddsMatch-

Node

mitsubishielectricmelsec_iq-fx5uc-96mt\/ds_firmwareMatch-

AND

mitsubishielectricmelsec_iq-fx5uc-96mt\/dsMatch-

References

jvn.jp/vu/JVNVU94650413

www.cisa.gov/news-events/ics-advisories/icsa-23-143-03

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

JSON

Related for NVD:CVE-2023-1424

talos1 ics1 prion1 talosblog1 cve1 nessus1 cvelist1