by Kastro CVE-2023-3346
Mitsubishi Electric Corporation MITSUBISHI CNC M800V Series M800VW — Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
Description · from the CVE record
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Affected
ProductAffectedFixed inSource
MITSUBISHI CNC M800V Series M800VWSystem Number BND-2051W000 versions A8 and prior–CNA
MITSUBISHI CNC M800V Series M800VSSystem Number BND-2052W000 versions A8 and prior–CNA
MITSUBISHI CNC M80V Series M80VSystem Number BND-2053W000 versions A8 and prior–CNA
MITSUBISHI CNC M80V Series M80VWSystem Number BND-2054W000 versions A8 and prior–CNA
MITSUBISHI CNC M800 Series M800WSystem Number BND-2005W000 versions FB and prior–CNA
MITSUBISHI CNC M800 Series M800SSystem Number BND-2006W000 versions FB and prior–CNA
MITSUBISHI CNC M80 Series M80System Number BND-2007W000 versions FB and prior–CNA
MITSUBISHI CNC M80 Series M80WSystem Number BND-2008W000 versions FB and prior–CNA
MITSUBISHI CNC E80 Series E80System Number BND-2009W000 versions FB and prior–CNA
MITSUBISHI CNC C80 Series C80System Number BND-2036W000 versions BF and prior–CNA
MITSUBISHI CNC M700V Series M720VWSystem Number BND-1015W000 versions LF and prior–CNA
MITSUBISHI CNC M700V Series M730VWSystem Number BND-1015W000 versions LF and prior–CNA
Scores by source
Mitsubishi (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total