CVE-2023-3346 – Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series

https://notcve.org/view.php?id=CVE-2023-3346

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery. • https://jvn.jp/vu/JVNVU90352157/index.html https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-03 https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-007_en.pdf • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •