60
CVE-2023-1424
—CVSS 3.1
8.1 high
EPSS
3%p88
Published
()
Modified
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
- Vendors
- mitsubishielectric
- Products
- melsec iq-fx5u-32mr\/ds firmware, melsec iq-fx5u-32mr\/dss firmware, melsec iq-fx5u-32mr\/es firmware, melsec iq-fx5u-32mr\/ess firmware, melsec iq-fx5u-32mt\/ds firmware, melsec iq-fx5u-32mt\/dss firmware, melsec iq-fx5u-32mt\/es firmware, melsec iq-fx5u-32mt\/ess firmware, melsec iq-fx5u-64mr\/ds firmware, melsec iq-fx5u-64mr\/dss firmware, melsec iq-fx5u-64mr\/es firmware, melsec iq-fx5u-64mr\/ess firmware
- Weakness
- CWE-120
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H