CVE-2023-1424

CRITICAL

10.0

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

CVE Details

CVSS v3.1 Score10.0

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/24/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

mitsubishielectric:melsec_iq-fx5u-32mr\/dsmitsubishielectric:melsec_iq-fx5u-32mr\/ds_firmwaremitsubishielectric:melsec_iq-fx5u-32mr\/dssmitsubishielectric:melsec_iq-fx5u-32mr\/dss_firmwaremitsubishielectric:melsec_iq-fx5u-32mr\/esmitsubishielectric:melsec_iq-fx5u-32mr\/es_firmwaremitsubishielectric:melsec_iq-fx5u-32mr\/essmitsubishielectric:melsec_iq-fx5u-32mr\/ess_firmwaremitsubishielectric:melsec_iq-fx5u-32mt\/dsmitsubishielectric:melsec_iq-fx5u-32mt\/ds_firmwaremitsubishielectric:melsec_iq-fx5u-32mt\/dssmitsubishielectric:melsec_iq-fx5u-32mt\/dss_firmwaremitsubishielectric:melsec_iq-fx5u-32mt\/esmitsubishielectric:melsec_iq-fx5u-32mt\/es_firmwaremitsubishielectric:melsec_iq-fx5u-32mt\/essmitsubishielectric:melsec_iq-fx5u-32mt\/ess_firmwaremitsubishielectric:melsec_iq-fx5u-64mr\/dsmitsubishielectric:melsec_iq-fx5u-64mr\/ds_firmwaremitsubishielectric:melsec_iq-fx5u-64mr\/dssmitsubishielectric:melsec_iq-fx5u-64mr\/dss_firmwaremitsubishielectric:melsec_iq-fx5u-64mr\/esmitsubishielectric:melsec_iq-fx5u-64mr\/es_firmwaremitsubishielectric:melsec_iq-fx5u-64mr\/essmitsubishielectric:melsec_iq-fx5u-64mr\/ess_firmwaremitsubishielectric:melsec_iq-fx5u-64mt\/dsmitsubishielectric:melsec_iq-fx5u-64mt\/ds_firmwaremitsubishielectric:melsec_iq-fx5u-64mt\/dssmitsubishielectric:melsec_iq-fx5u-64mt\/dss_firmwaremitsubishielectric:melsec_iq-fx5u-64mt\/esmitsubishielectric:melsec_iq-fx5u-64mt\/es_firmwaremitsubishielectric:melsec_iq-fx5u-64mt\/essmitsubishielectric:melsec_iq-fx5u-64mt\/ess_firmwaremitsubishielectric:melsec_iq-fx5u-80mr\/dsmitsubishielectric:melsec_iq-fx5u-80mr\/ds_firmwaremitsubishielectric:melsec_iq-fx5u-80mr\/dssmitsubishielectric:melsec_iq-fx5u-80mr\/dss_firmwaremitsubishielectric:melsec_iq-fx5u-80mr\/esmitsubishielectric:melsec_iq-fx5u-80mr\/es_firmwaremitsubishielectric:melsec_iq-fx5u-80mr\/essmitsubishielectric:melsec_iq-fx5u-80mr\/ess_firmwaremitsubishielectric:melsec_iq-fx5u-80mt\/dsmitsubishielectric:melsec_iq-fx5u-80mt\/ds_firmwaremitsubishielectric:melsec_iq-fx5u-80mt\/dssmitsubishielectric:melsec_iq-fx5u-80mt\/dss_firmwaremitsubishielectric:melsec_iq-fx5u-80mt\/esmitsubishielectric:melsec_iq-fx5u-80mt\/es_firmwaremitsubishielectric:melsec_iq-fx5u-80mt\/essmitsubishielectric:melsec_iq-fx5u-80mt\/ess_firmwaremitsubishielectric:melsec_iq-fx5uc-32mr\/ddsmitsubishielectric:melsec_iq-fx5uc-32mr\/dds_firmwaremitsubishielectric:melsec_iq-fx5uc-32mr\/dsmitsubishielectric:melsec_iq-fx5uc-32mr\/ds-tsmitsubishielectric:melsec_iq-fx5uc-32mr\/ds-ts_firmwaremitsubishielectric:melsec_iq-fx5uc-32mr\/ds_firmwaremitsubishielectric:melsec_iq-fx5uc-32mt\/ddsmitsubishielectric:melsec_iq-fx5uc-32mt\/dds_firmwaremitsubishielectric:melsec_iq-fx5uc-32mt\/dsmitsubishielectric:melsec_iq-fx5uc-32mt\/ds-tsmitsubishielectric:melsec_iq-fx5uc-32mt\/ds-ts_firmwaremitsubishielectric:melsec_iq-fx5uc-32mt\/ds_firmwaremitsubishielectric:melsec_iq-fx5uc-32mt\/dss-tsmitsubishielectric:melsec_iq-fx5uc-32mt\/dss-ts_firmwaremitsubishielectric:melsec_iq-fx5uc-64mr\/ddsmitsubishielectric:melsec_iq-fx5uc-64mr\/dds_firmwaremitsubishielectric:melsec_iq-fx5uc-64mr\/dsmitsubishielectric:melsec_iq-fx5uc-64mr\/ds_firmwaremitsubishielectric:melsec_iq-fx5uc-64mt\/ddsmitsubishielectric:melsec_iq-fx5uc-64mt\/dds_firmwaremitsubishielectric:melsec_iq-fx5uc-64mt\/dsmitsubishielectric:melsec_iq-fx5uc-64mt\/ds_firmwaremitsubishielectric:melsec_iq-fx5uc-96mr\/ddsmitsubishielectric:melsec_iq-fx5uc-96mr\/dds_firmwaremitsubishielectric:melsec_iq-fx5uc-96mr\/dsmitsubishielectric:melsec_iq-fx5uc-96mr\/ds_firmwaremitsubishielectric:melsec_iq-fx5uc-96mt\/ddsmitsubishielectric:melsec_iq-fx5uc-96mt\/dds_firmwaremitsubishielectric:melsec_iq-fx5uc-96mt\/dsmitsubishielectric:melsec_iq-fx5uc-96mt\/ds_firmware

Weaknesses (CWE)

CWE-120CWE-120

References

https://jvn.jp/vu/JVNVU94650413(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://jvn.jp/vu/JVNVU94650413(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03(af854a3a-2127-422b-91ae-364da2661108)

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf(af854a3a-2127-422b-91ae-364da2661108)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1727(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.