CVE-2024-7316 Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.
Problem types: cwe_id: CWE-1284
description: CWE-1284 Improper Validation of Specified Quantity in Input
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M800V Series M800VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M800V Series M800VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M80V Series M80V
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M80V Series M80VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M800 Series M800W
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M800 Series M800S
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M80 Series M80
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M80 Series M80W
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC E80 Series E80
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC C80 Series C80
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M700V Series M720VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M700V Series M730VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M700V Series M750VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M700V Series M720VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M700V Series M730VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M700V Series M750VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC M70V Series M70V
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC E70 Series E70
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC Software Tools NC Trainer2
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric CNC Software Tools NC Trainer2 plus
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-10-17T21:52:22.864Z