CVE-2023-3346
Critical
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMitsubishielectric C80 Firmware
PublishedAug 3, 2023
First seenAug 3, 2023
Weakness typeCWE-120CWE-120
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric c80_firmware | No range specified | — |
| mitsubishielectric e70_firmware | No range specified | — |
| mitsubishielectric e80_firmware | No range specified | — |
| mitsubishielectric m70v_firmware | No range specified | — |
| mitsubishielectric m720vs_firmware | No range specified | — |
| mitsubishielectric m720vs_15-type_firmware | No range specified | — |
| mitsubishielectric m720vw_firmware | No range specified | — |
| mitsubishielectric m730vs_firmware | No range specified | — |
| mitsubishielectric m730vs_15-type_firmware | No range specified | — |
| mitsubishielectric m730vw_firmware | No range specified | — |
| mitsubishielectric m750vs_firmware | No range specified | — |
| mitsubishielectric m750vs_15-type_firmware | No range specified | — |
| mitsubishielectric m750vw_firmware | No range specified | — |
| mitsubishielectric m80_firmware | No range specified | — |
| mitsubishielectric m800s_firmware | No range specified | — |
| mitsubishielectric m800vs_firmware | No range specified | — |
| mitsubishielectric m800vw_firmware | No range specified | — |
| mitsubishielectric m800w_firmware | No range specified | — |
| mitsubishielectric m80v_firmware | No range specified | — |
| mitsubishielectric m80vw_firmware | No range specified | — |
| mitsubishielectric m80w_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.