CVE-2023-1424
10.0
CRITICAL · CVSS 3.1 · EPSS 3.4% (pctl 89)
In your normal cycle
Critical by CVSS (10), but no sign of active exploitation.
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
Scoring
| CVSS | 10.0 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 3.44% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-120 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2023-05-24 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| mitsubishielectric | melsec iq-fx5u-32mr\/ds |
| mitsubishielectric | melsec iq-fx5u-32mr\/ds firmware |
| mitsubishielectric | melsec iq-fx5u-32mr\/dss |
| mitsubishielectric | melsec iq-fx5u-32mr\/dss firmware |
| mitsubishielectric | melsec iq-fx5u-32mr\/es |
| mitsubishielectric | melsec iq-fx5u-32mr\/es firmware |
| mitsubishielectric | melsec iq-fx5u-32mr\/ess |
| mitsubishielectric | melsec iq-fx5u-32mr\/ess firmware |
| mitsubishielectric | melsec iq-fx5u-32mt\/ds |
| mitsubishielectric | melsec iq-fx5u-32mt\/ds firmware |
| mitsubishielectric | melsec iq-fx5u-32mt\/dss |
| mitsubishielectric | melsec iq-fx5u-32mt\/dss firmware |
| mitsubishielectric | melsec iq-fx5u-32mt\/es |
| mitsubishielectric | melsec iq-fx5u-32mt\/es firmware |
| mitsubishielectric | melsec iq-fx5u-32mt\/ess |
| mitsubishielectric | melsec iq-fx5u-32mt\/ess firmware |
| mitsubishielectric | melsec iq-fx5u-64mr\/ds |
| mitsubishielectric | melsec iq-fx5u-64mr\/ds firmware |
| mitsubishielectric | melsec iq-fx5u-64mr\/dss |
| mitsubishielectric | melsec iq-fx5u-64mr\/dss firmware |
| mitsubishielectric | melsec iq-fx5u-64mr\/es |
| mitsubishielectric | melsec iq-fx5u-64mr\/es firmware |
| mitsubishielectric | melsec iq-fx5u-64mr\/ess |
| mitsubishielectric | melsec iq-fx5u-64mr\/ess firmware |
| mitsubishielectric | melsec iq-fx5u-64mt\/ds |
| mitsubishielectric | melsec iq-fx5u-64mt\/ds firmware |
| mitsubishielectric | melsec iq-fx5u-64mt\/dss |
| mitsubishielectric | melsec iq-fx5u-64mt\/dss firmware |
| mitsubishielectric | melsec iq-fx5u-64mt\/es |
| mitsubishielectric | melsec iq-fx5u-64mt\/es firmware |
| mitsubishielectric | melsec iq-fx5u-64mt\/ess |
| mitsubishielectric | melsec iq-fx5u-64mt\/ess firmware |
| mitsubishielectric | melsec iq-fx5u-80mr\/ds |
| mitsubishielectric | melsec iq-fx5u-80mr\/ds firmware |
| mitsubishielectric | melsec iq-fx5u-80mr\/dss |
| mitsubishielectric | melsec iq-fx5u-80mr\/dss firmware |
| mitsubishielectric | melsec iq-fx5u-80mr\/es |
| mitsubishielectric | melsec iq-fx5u-80mr\/es firmware |
| mitsubishielectric | melsec iq-fx5u-80mr\/ess |
| mitsubishielectric | melsec iq-fx5u-80mr\/ess firmware |
References
- https://jvn.jp/vu/JVNVU94650413
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf
- https://jvn.jp/vu/JVNVU94650413
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1727
→ the Explorer · watch your stack · NVD