CVE-2023-1424

Published: May 24, 2023Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Affected (39)

Mitsubishielectric

39 products

Melsec Iq Fx5u 32mr/ds Firmware

Melsec Iq Fx5u 32mr/dss Firmware

Melsec Iq Fx5u 32mr/es Firmware

Melsec Iq Fx5u 32mr/ess Firmware

Melsec Iq Fx5u 32mt/ds Firmware

Melsec Iq Fx5u 32mt/dss Firmware

Melsec Iq Fx5u 32mt/es Firmware

Melsec Iq Fx5u 32mt/ess Firmware

Melsec Iq Fx5u 64mr/ds Firmware

Melsec Iq Fx5u 64mr/dss Firmware

Melsec Iq Fx5u 64mr/es Firmware

Melsec Iq Fx5u 64mr/ess Firmware

Melsec Iq Fx5u 64mt/ds Firmware

Melsec Iq Fx5u 64mt/dss Firmware

Melsec Iq Fx5u 64mt/es Firmware

Melsec Iq Fx5u 64mt/ess Firmware

Melsec Iq Fx5u 80mr/ds Firmware

Melsec Iq Fx5u 80mr/dss Firmware

Melsec Iq Fx5u 80mr/es Firmware

Melsec Iq Fx5u 80mr/ess Firmware

Melsec Iq Fx5u 80mt/ds Firmware

Melsec Iq Fx5u 80mt/dss Firmware

Melsec Iq Fx5u 80mt/es Firmware

Melsec Iq Fx5u 80mt/ess Firmware

Melsec Iq Fx5uc 32mr/dds Firmware

Melsec Iq Fx5uc 32mr/ds Firmware

Melsec Iq Fx5uc 32mr/ds Ts Firmware

Melsec Iq Fx5uc 32mt/dds Firmware

Melsec Iq Fx5uc 32mt/ds Firmware

Melsec Iq Fx5uc 32mt/dss Ts Firmware

Melsec Iq Fx5uc 32mt/ds Ts Firmware

Melsec Iq Fx5uc 64mr/dds Firmware

Melsec Iq Fx5uc 64mr/ds Firmware

Melsec Iq Fx5uc 64mt/dds Firmware

Melsec Iq Fx5uc 64mt/ds Firmware

Melsec Iq Fx5uc 96mr/dds Firmware

Melsec Iq Fx5uc 96mr/ds Firmware

Melsec Iq Fx5uc 96mt/dds Firmware

Melsec Iq Fx5uc 96mt/ds Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/ds	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/dss	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/es	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mr/ess	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/ds	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/dss	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/es	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 32mt/ess	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/ds	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/dss	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/es	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mr/ess	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/ds	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/dss	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/es	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 64mt/ess	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/ds	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/dss	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/es	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mr/ess	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/ds	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/dss	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/es	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5u 80mt/ess	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mr/dds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mr/dds	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mr/ds	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mr/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mr/ds Ts	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/dds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/dds	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/ds	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/dss Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/dss Ts	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 32mt/ds Ts	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 64mr/dds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 64mr/dds	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 64mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 64mr/ds	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 64mt/dds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 64mt/dds	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 64mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 64mt/ds	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 96mr/dds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 96mr/dds	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 96mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 96mr/ds	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 96mt/dds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 96mt/dds	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Melsec Iq Fx5uc 96mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Melsec Iq Fx5uc 96mt/ds	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (7)

https://jvn.jp/vu/JVNVU94650413

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

PatchVendor Advisory

https://jvn.jp/vu/JVNVU94650413

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1727

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.