CVE-2023-1424: critical vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F…
Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module
Published · Updated
Follow this CVE+ Monitor MELSEC iQ-F Series FX5UC-32MR/DS-TS+ Monitor MELSEC iQ-F Series FX5UC-32MT/DSS-TS
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 3.4%
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/DSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/ESMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/DSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/ESMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/DSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/ESMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MR/DS-TSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS-TSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DS-TSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/DMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/DSSMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/DMitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/DSSMitsubishi Electric Corporation · MELSEC iQ-R Series R00CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R01CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R02CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R04CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R04ENCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R08CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R08ENCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R08PCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R08SFCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R120CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R120ENCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R120PCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R120SFCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R16CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R16ENCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R16PCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R16SFCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R32CPUMitsubishi Electric Corporation · MELSEC iQ-R Series R32ENCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R32PCPUMitsubishi Electric Corporation · MELSEC iQ-R Series R32SFCPURelated CVEs — Mitsubishi Electric Corporation MELSEC iQ-F…
In the same product, most dangerous first.
CVE-2023-4625MEDIUMDenial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU moduleEPSS 1.3%CVE-2022-40267MEDIUMAuthentication Bypass Vulnerability in Web Server Function on MELSEC SeriesEPSS 1.2%CVE-2023-0457HIGHInformation Disclosure Vulnerability in MELSEC SeriesEPSS 1.2%CVE-2023-4699CRITICALArbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA productsEPSS 1.1%CVE-2025-3755CRITICALInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.9%CVE-2025-5514MEDIUMDenial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU moduleEPSS 0.6%