CVE-2023-1424 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-32MT/ES
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-64MT/ES
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-80MT/ES
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-32MR/ES
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-64MR/ES
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-80MR/ES
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-32MT/DS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-64MT/DS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-80MT/DS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-32MR/DS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-64MR/DS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-80MR/DS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-32MT/ESS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-64MT/ESS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-80MT/ESS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-32MT/DSS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-64MT/DSS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5U-80MT/DSS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-32MT/D
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-64MT/D
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-96MT/D
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-32MT/DSS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-64MT/DSS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-96MT/DSS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-32MT/DS-TS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-32MT/DSS-TS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-F Series FX5UC-32MR/DS-TS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R00CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R01CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R02CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R04CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R08CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R16CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R32CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R120CPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R04ENCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R08ENCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R16ENCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R32ENCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R120ENCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R08SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R16SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R32SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R120SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R08PCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R16PCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R32PCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series R120PCPU
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2023-05-24T04:39:25.040Z