critical9.8
CVE-2023-3346
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause …
Impact
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | C80 Firmware | All versions |
| Mitsubishielectric | E70 Firmware | All versions |
| Mitsubishielectric | E80 Firmware | All versions |
| Mitsubishielectric | M70v Firmware | All versions |
| Mitsubishielectric | M720vs Firmware | All versions |
| Mitsubishielectric | M720vs 15-Type Firmware | All versions |
| Mitsubishielectric | M720vw Firmware | All versions |
| Mitsubishielectric | M730vs Firmware | All versions |
| Mitsubishielectric | M730vs 15-Type Firmware | All versions |
| Mitsubishielectric | M730vw Firmware | All versions |
| Mitsubishielectric | M750vs Firmware | All versions |
| Mitsubishielectric | M750vs 15-Type Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/vu/JVNVU90352157/index.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-007_en.pdf
- https://jvn.jp/vu/JVNVU90352157/index.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-007_en.pdf