CVE-2023-1424 (published 2023-05-24T04:39:25.040Z)
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
Affected products: Vendor: Mitsubishi Electric Corporation
Product: MELSEC iQ-F Series FX5U-32MT/ES
Versions: Serial number 17X**** or later, versions from 1.220 to 1.281