ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-3346

—
CVSS 3.1
9.8 critical
EPSS
2%p81
Published
()
Modified
Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.

Vendors
mitsubishielectric
Products
c80 firmware, e70 firmware, e80 firmware, m70v firmware, m720vs firmware, m720vs 15-type firmware, m720vw firmware, m730vs firmware, m730vs 15-type firmware, m730vw firmware, m750vs firmware, m750vs 15-type firmware
Weakness
CWE-120
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

No ingested article mentions this CVE yet.