{
    "id": "CVE-2023-1424",
    "published": "2023-05-24 05:15:08",
    "last_modified": "2026-06-17 05:27:55",
    "cvss_score": "10.0",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
    "cwe": "CWE-120",
    "description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.",
    "epss_score": "0.03440",
    "epss_percentile": "0.88657",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-09 18:17:34",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (10), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/ds"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/ds_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/dss"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/dss_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/es"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/es_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/ess"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mr\\/ess_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/ds"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/ds_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/dss"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/dss_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/es"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/es_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/ess"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-32mt\\/ess_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/ds"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/ds_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/dss"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/dss_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/es"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/es_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/ess"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mr\\/ess_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/ds"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/ds_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/dss"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/dss_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/es"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/es_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/ess"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-64mt\\/ess_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/ds"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/ds_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/dss"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/dss_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/es"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/es_firmware"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/ess"
        },
        {
            "vendor": "mitsubishielectric",
            "product": "melsec_iq-fx5u-80mr\\/ess_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://jvn.jp/vu/JVNVU94650413",
        "https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03",
        "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf",
        "https://jvn.jp/vu/JVNVU94650413",
        "https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03",
        "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf",
        "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1727"
    ]
}