VULNERABILITY INTELLIGENCE

CVE-2023-1424

CVSS score10 CRITICAL
EPSS probability3.44%
CISA KEVNot currently listed
Published2023-05-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Weakness classification

  • Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp: CWE-120
  • nvd@nist.gov: CWE-120

Primary references