by Kastro CVE-2024-0802
Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU — Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remot…
Description · from the CVE record
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target product by sending a specially crafted packet.
Affected
ProductAffectedFixed inSource
MELSEC-Q Series Q03UDECPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q04UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q06UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q10UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q13UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q20UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q26UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q50UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q100UDEHCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q03UDVCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q04UDVCPUThe first 5 digits of serial No. "26061" and prior–CNA
MELSEC-Q Series Q06UDVCPUThe first 5 digits of serial No. "26061" and prior–CNA
Scores by source
Mitsubishi (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total