CVE-2023-1424
Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module
Severity Score
8.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-16 CVE Reserved
- 2023-05-24 CVE Published
- 2024-08-02 CVE Updated
- 2024-11-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/vu/JVNVU94650413 | Third Party Advisory | |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf | 2023-07-07 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/dss Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/dss Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/dss Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/es Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/es Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/es Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/ess Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/ess Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mr\/ess Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mr\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/dss Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/dss Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/es Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/es Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/es Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/ess Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-32mt\/ess Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-32mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/dss Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/dss Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/dss Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/es Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/es Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/es Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/ess Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/ess Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mr\/ess Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mr\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/dss Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/dss Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/es Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/es Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/es Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/ess Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-64mt\/ess Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-64mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/dss Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/dss Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/dss Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/es Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/es Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/es Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/ess Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/ess Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mr\/ess Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mr\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/dss Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/dss Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/dss" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/es Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/es Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/es Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/es" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/ess Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5u-80mt\/ess Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5u-80mt\/ess" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mr\/dds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mr\/dds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mr\/dds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mr\/dds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mr\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mr\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mr\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mr\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mr\/ds-ts Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mr\/ds-ts Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mr\/ds-ts Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mr\/ds-ts" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/dds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/dds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/dds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/dds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/dss-ts Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/dss-ts Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/dss-ts Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/dss-ts" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/ds-ts Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/ds-ts Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-32mt\/ds-ts Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-32mt\/ds-ts" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mr\/dds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mr\/dds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mr\/dds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mr\/dds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mr\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mr\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mr\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mr\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mt\/dds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mt\/dds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mt\/dds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mt\/dds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mt\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mt\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-64mt\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-64mt\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mr\/dds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mr\/dds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mr\/dds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mr\/dds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mr\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mr\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mr\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mr\/ds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mt\/dds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mt\/dds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mt\/dds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mt\/dds" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mt\/ds Firmware Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mt\/ds Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Iq-fx5uc-96mt\/ds Search vendor "Mitsubishielectric" for product "Melsec Iq-fx5uc-96mt\/ds" | - | - |
Safe
|