CVE-2024-0803
Critical
Description
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMELSEC-Q Series Q03UDECPU
PublishedMar 15, 2024
First seenMar 15, 2024
Weakness typeCWE-190Integer overflow
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q04UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q06UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q10UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q13UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q20UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q26UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q50UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q100UDEHCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q04UDVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q06UDVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q13UDVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q26UDVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q04UDPVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q06UDPVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q13UDPVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-Q Series Q26UDPVCPU | The first 5 digits of serial No. "26061" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L02CPU | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L06CPU | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L26CPU | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L02CPU-P | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L06CPU-P | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L26CPU-P | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L26CPU-BT | The first 5 digits of serial No. "26041" and prior | — |
| Mitsubishi Electric Corporation MELSEC-L Series L26CPU-PBT | The first 5 digits of serial No. "26041" and prior | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.