
CVE-2024-1917
https://notcve.org/view.php?id=CVE-2024-1917
15 Mar 2024 — Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. Vulnerabilidad de desbordamiento de enteros o envoltura en los módulos de CPU de las series MELSEC-Q y MELSEC-L de Mitsubishi Electric Corporation permite que un atacante remoto no autenticado ejecute código malicioso en un producto objetivo enviando un paqu... • https://jvn.jp/vu/JVNVU99690199 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-1916
https://notcve.org/view.php?id=CVE-2024-1916
15 Mar 2024 — Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. Vulnerabilidad de desbordamiento de enteros o envoltura en los módulos de CPU de las series MELSEC-Q y MELSEC-L de Mitsubishi Electric Corporation permite que un atacante remoto no autenticado ejecute código malicioso en un producto objetivo enviando un paqu... • https://jvn.jp/vu/JVNVU99690199 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-1915
https://notcve.org/view.php?id=CVE-2024-1915
15 Mar 2024 — Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. Vulnerabilidad de escalado de puntero incorrecto en los módulos de CPU de las series MELSEC-Q y MELSEC-L de Mitsubishi Electric Corporation permite que un atacante remoto no autenticado ejecute código malicioso en un producto objetivo enviando un paquete especial... • https://jvn.jp/vu/JVNVU99690199 • CWE-468: Incorrect Pointer Scaling •

CVE-2024-0803
https://notcve.org/view.php?id=CVE-2024-0803
14 Mar 2024 — Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. Vulnerabilidad de desbordamiento de enteros o envoltura en los módulos de CPU de las series MELSEC-Q y MELSEC-L de Mitsubishi Electric Corporation permite que un atacante remoto no autenticado ejecute código malicioso en un producto objetivo enviando un paqu... • https://jvn.jp/vu/JVNVU99690199 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-0802
https://notcve.org/view.php?id=CVE-2024-0802
14 Mar 2024 — Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target product by sending a specially crafted packet. Vulnerabilidad de escalado de puntero incorrecto en los módulos de CPU de las series MELSEC-Q y MELSEC-L de Mitsubishi Electric Corporation permite a un atacante remoto no autenticado leer información arbitraria... • https://jvn.jp/vu/JVNVU99690199 • CWE-468: Incorrect Pointer Scaling •

CVE-2022-24946
https://notcve.org/view.php?id=CVE-2022-24946
15 Jun 2022 — Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCP... • https://jvn.jp/vu/JVNVU90895626/index.html • CWE-667: Improper Locking •

CVE-2020-5652
https://notcve.org/view.php?id=CVE-2020-5652
30 Oct 2020 — Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' an... • https://jvn.jp/vu/JVNVU96558207/index.html • CWE-400: Uncontrolled Resource Consumption •

CVE-2020-5527
https://notcve.org/view.php?id=CVE-2020-5527
30 Mar 2020 — When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functi... • https://jvn.jp/en/vu/JVNVU91553662/index.html • CWE-400: Uncontrolled Resource Consumption •