CVE-2024-0803

Critical

Description

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.

SeverityCritical
CVSS9.8
Exploit probability—
ProductMELSEC-Q Series Q03UDECPU
PublishedMar 15, 2024
First seenMar 15, 2024

How to fix

Affected products

ProductAffected versionsFixed in
Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q04UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q06UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q10UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q13UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q20UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q26UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q50UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q100UDEHCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q04UDVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q06UDVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q13UDVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q26UDVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q04UDPVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q06UDPVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q13UDPVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-Q Series Q26UDPVCPUThe first 5 digits of serial No. "26061" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L02CPUThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L06CPUThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L26CPUThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L02CPU-PThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L06CPU-PThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L26CPU-PThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L26CPU-BTThe first 5 digits of serial No. "26041" and prior—
Mitsubishi Electric Corporation MELSEC-L Series L26CPU-PBTThe first 5 digits of serial No. "26041" and prior—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.