CVE-2023-1424

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Published May 24, 2023 CVSS 3.1 · 10 Critical EPSS 3.4% KEV · Not listed
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-23677 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Mitsubishielectric Melsec Iq-fx5u-32mr\/ds Melsec Iq-fx5u-32mr\/ds Firmware Melsec Iq-fx5u-32mr\/dss Melsec Iq-fx5u-32mr\/dss Firmware Melsec Iq-fx5u-32mr\/es Melsec Iq-fx5u-32mr\/es Firmware Melsec Iq-fx5u-32mr\/ess Melsec Iq-fx5u-32mr\/ess Firmware Melsec Iq-fx5u-32mt\/ds Melsec Iq-fx5u-32mt\/ds Firmware Melsec Iq-fx5u-32mt\/dss Melsec Iq-fx5u-32mt\/dss Firmware Melsec Iq-fx5u-32mt\/es Melsec Iq-fx5u-32mt\/es Firmware Melsec Iq-fx5u-32mt\/ess Melsec Iq-fx5u-32mt\/ess Firmware Melsec Iq-fx5u-64mr\/ds Melsec Iq-fx5u-64mr\/ds Firmware Melsec Iq-fx5u-64mr\/dss Melsec Iq-fx5u-64mr\/dss Firmware Melsec Iq-fx5u-64mr\/es Melsec Iq-fx5u-64mr\/es Firmware Melsec Iq-fx5u-64mr\/ess Melsec Iq-fx5u-64mr\/ess Firmware Melsec Iq-fx5u-64mt\/ds Melsec Iq-fx5u-64mt\/ds Firmware Melsec Iq-fx5u-64mt\/dss Melsec Iq-fx5u-64mt\/dss Firmware Melsec Iq-fx5u-64mt\/es Melsec Iq-fx5u-64mt\/es Firmware Melsec Iq-fx5u-64mt\/ess Melsec Iq-fx5u-64mt\/ess Firmware Melsec Iq-fx5u-80mr\/ds Melsec Iq-fx5u-80mr\/ds Firmware Melsec Iq-fx5u-80mr\/dss Melsec Iq-fx5u-80mr\/dss Firmware Melsec Iq-fx5u-80mr\/es Melsec Iq-fx5u-80mr\/es Firmware Melsec Iq-fx5u-80mr\/ess Melsec Iq-fx5u-80mr\/ess Firmware Melsec Iq-fx5u-80mt\/ds Melsec Iq-fx5u-80mt\/ds Firmware Melsec Iq-fx5u-80mt\/dss Melsec Iq-fx5u-80mt\/dss Firmware Melsec Iq-fx5u-80mt\/es Melsec Iq-fx5u-80mt\/es Firmware Melsec Iq-fx5u-80mt\/ess Melsec Iq-fx5u-80mt\/ess Firmware Melsec Iq-fx5uc-32mr\/dds Melsec Iq-fx5uc-32mr\/dds Firmware Melsec Iq-fx5uc-32mr\/ds Melsec Iq-fx5uc-32mr\/ds-ts Melsec Iq-fx5uc-32mr\/ds-ts Firmware Melsec Iq-fx5uc-32mr\/ds Firmware Melsec Iq-fx5uc-32mt\/dds Melsec Iq-fx5uc-32mt\/dds Firmware Melsec Iq-fx5uc-32mt\/ds Melsec Iq-fx5uc-32mt\/ds-ts Melsec Iq-fx5uc-32mt\/ds-ts Firmware Melsec Iq-fx5uc-32mt\/ds Firmware Melsec Iq-fx5uc-32mt\/dss-ts Melsec Iq-fx5uc-32mt\/dss-ts Firmware Melsec Iq-fx5uc-64mr\/dds Melsec Iq-fx5uc-64mr\/dds Firmware Melsec Iq-fx5uc-64mr\/ds Melsec Iq-fx5uc-64mr\/ds Firmware Melsec Iq-fx5uc-64mt\/dds Melsec Iq-fx5uc-64mt\/dds Firmware Melsec Iq-fx5uc-64mt\/ds Melsec Iq-fx5uc-64mt\/ds Firmware Melsec Iq-fx5uc-96mr\/dds Melsec Iq-fx5uc-96mr\/dds Firmware Melsec Iq-fx5uc-96mr\/ds Melsec Iq-fx5uc-96mr\/ds Firmware Melsec Iq-fx5uc-96mt\/dds Melsec Iq-fx5uc-96mt\/dds Firmware Melsec Iq-fx5uc-96mt\/ds Melsec Iq-fx5uc-96mt\/ds Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
Mitsubishi
Published
Updated
Mar 5, 2025, 6:59 PM
Reserved
Mar 16, 2023, 2:10 AM
Status
Modified
Published
May 24, 2023, 5:15 AM
Modified
Jun 17, 2026, 5:27 AM