CVEvulnerability

CVE-2023-3346

9.8 CRITICAL Published 2023-08-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.

Affected configurations

• mitsubishielectric c80 firmware • mitsubishielectric e70 firmware • mitsubishielectric e80 firmware • mitsubishielectric m70v firmware • mitsubishielectric m720vs firmware • mitsubishielectric m720vs 15-type firmware • mitsubishielectric m720vw firmware • mitsubishielectric m730vs firmware • mitsubishielectric m730vs 15-type firmware • mitsubishielectric m730vw firmware • mitsubishielectric m750vs firmware • mitsubishielectric m750vs 15-type firmware • mitsubishielectric m750vw firmware • mitsubishielectric m80 firmware • mitsubishielectric m800s firmware • mitsubishielectric m800vs firmware • mitsubishielectric m800vw firmware • mitsubishielectric m800w firmware • mitsubishielectric m80v firmware • mitsubishielectric m80vw firmware • mitsubishielectric m80w firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References