CVE-2023-1424
Critical
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
SeverityCritical
CVSS10.0
Exploit probability—
ProductMitsubishielectric Melsec Iq-fx5u-32mr\/ds Firmware
PublishedMay 24, 2023
First seenMay 24, 2023
Weakness typeCWE-120CWE-120
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric melsec_iq-fx5u-32mr\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mr\/dss_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mr\/es_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mr\/ess_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mt\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mt\/dss_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mt\/es_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-32mt\/ess_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mr\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mr\/dss_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mr\/es_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mr\/ess_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mt\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mt\/dss_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mt\/es_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-64mt\/ess_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mr\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mr\/dss_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mr\/es_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mr\/ess_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mt\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mt\/dss_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mt\/es_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5u-80mt\/ess_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mr\/dds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mr\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mr\/ds-ts_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mt\/dds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mt\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mt\/dss-ts_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-32mt\/ds-ts_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-64mr\/dds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-64mr\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-64mt\/dds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-64mt\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-96mr\/dds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-96mr\/ds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-96mt\/dds_firmware | No range specified | — |
| mitsubishielectric melsec_iq-fx5uc-96mt\/ds_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.