CVE-2023-1424criticalCWE-120

CVE-2023-1424: falha crítica em Mitsubishi Electric Corporation MELSEC iQ-F…

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Publicada em 24 mai 2023 · Atualizada em 05 mar 2025

Seguir esta CVE + Monitorar MELSEC iQ-F Series FX5UC-32MR/DS-TS + Monitorar MELSEC iQ-F Series FX5UC-32MT/DSS-TS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 3.4%

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

CVEs relacionadas — Mitsubishi Electric Corporation MELSEC iQ-F…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4625MEDIUMDenial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU moduleEPSS 1.3%CVE-2022-40267MEDIUMAuthentication Bypass Vulnerability in Web Server Function on MELSEC SeriesEPSS 1.2%CVE-2023-0457HIGHInformation Disclosure Vulnerability in MELSEC SeriesEPSS 1.2%CVE-2023-4699CRITICALArbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA productsEPSS 1.1%CVE-2025-3755CRITICALInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.9%CVE-2025-5514MEDIUMDenial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU moduleEPSS 0.6%

Referências

https://jvn.jp/vu/JVNVU94650413 https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03 https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1727