CVE-2023-3346
Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-06-21 CVE Reserved
- 2023-08-03 CVE Published
- 2024-08-02 CVE Updated
- 2024-10-25 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/vu/JVNVU90352157/index.html | Government Resource | |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-03 | Government Resource |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-007_en.pdf | 2023-08-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | C80 Firmware Search vendor "Mitsubishielectric" for product "C80 Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | C80 Search vendor "Mitsubishielectric" for product "C80" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | E70 Firmware Search vendor "Mitsubishielectric" for product "E70 Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | E70 Search vendor "Mitsubishielectric" for product "E70" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | E80 Firmware Search vendor "Mitsubishielectric" for product "E80 Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | E80 Search vendor "Mitsubishielectric" for product "E80" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M70v Firmware Search vendor "Mitsubishielectric" for product "M70v Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M70v Search vendor "Mitsubishielectric" for product "M70v" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M720vs Firmware Search vendor "Mitsubishielectric" for product "M720vs Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M720vs Search vendor "Mitsubishielectric" for product "M720vs" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M720vs 15-type Firmware Search vendor "Mitsubishielectric" for product "M720vs 15-type Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M720vs 15-type Search vendor "Mitsubishielectric" for product "M720vs 15-type" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M720vw Firmware Search vendor "Mitsubishielectric" for product "M720vw Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M720vw Search vendor "Mitsubishielectric" for product "M720vw" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M730vs Firmware Search vendor "Mitsubishielectric" for product "M730vs Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M730vs Search vendor "Mitsubishielectric" for product "M730vs" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M730vs 15-type Firmware Search vendor "Mitsubishielectric" for product "M730vs 15-type Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M730vs 15-type Search vendor "Mitsubishielectric" for product "M730vs 15-type" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M730vw Firmware Search vendor "Mitsubishielectric" for product "M730vw Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M730vw Search vendor "Mitsubishielectric" for product "M730vw" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M750vs Firmware Search vendor "Mitsubishielectric" for product "M750vs Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M750vs Search vendor "Mitsubishielectric" for product "M750vs" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M750vs 15-type Firmware Search vendor "Mitsubishielectric" for product "M750vs 15-type Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M750vs 15-type Search vendor "Mitsubishielectric" for product "M750vs 15-type" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M750vw Firmware Search vendor "Mitsubishielectric" for product "M750vw Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M750vw Search vendor "Mitsubishielectric" for product "M750vw" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M80 Firmware Search vendor "Mitsubishielectric" for product "M80 Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M80 Search vendor "Mitsubishielectric" for product "M80" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M800s Firmware Search vendor "Mitsubishielectric" for product "M800s Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M800s Search vendor "Mitsubishielectric" for product "M800s" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M800vs Firmware Search vendor "Mitsubishielectric" for product "M800vs Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M800vs Search vendor "Mitsubishielectric" for product "M800vs" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M800vw Firmware Search vendor "Mitsubishielectric" for product "M800vw Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M800vw Search vendor "Mitsubishielectric" for product "M800vw" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M800w Firmware Search vendor "Mitsubishielectric" for product "M800w Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M800w Search vendor "Mitsubishielectric" for product "M800w" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M80v Firmware Search vendor "Mitsubishielectric" for product "M80v Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M80v Search vendor "Mitsubishielectric" for product "M80v" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M80vw Firmware Search vendor "Mitsubishielectric" for product "M80vw Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M80vw Search vendor "Mitsubishielectric" for product "M80vw" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | M80w Firmware Search vendor "Mitsubishielectric" for product "M80w Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | M80w Search vendor "Mitsubishielectric" for product "M80w" | - | - |
Safe
|