CVE-2023-1424

Severity

CRITICAL

CVSS

10.0

EPSS

0.0344

Risk score

41.2

CISA KEV

No

PoC

No

Published

2023-05-24

Modified

2025-03-05

First seen

2026-08-07

Aliases

EUVD-2023-23677, GHSA-JRMR-8594-CRXX

Products

Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-32MR/DS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-32MR/ES Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-32MT/DS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-32MT/DSS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-32MT/ES Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-32MT/ESS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-64MR/DS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-64MR/ES Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-64MT/DS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-64MT/DSS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-64MT/ES Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-64MT/ESS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-80MR/DS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-80MR/ES Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-80MT/DS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-80MT/DSS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-80MT/ES Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5U-80MT/ESS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-32MR/DS-TS versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-32MT/D Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-32MT/DS-TS versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-32MT/DSS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-64MT/D Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-64MT/DSS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-96MT/D Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-F Series FX5UC-96MT/DSS Serial number 17X**** or later, versions from 1.220 to 1.281, Mitsubishi Electric Corporation:MELSEC iQ-R Series R00CPU versions 35 and prior, Mitsubishi Electric Corporation:MELSEC iQ-R Series R01CPU versions 35 and prior, Mitsubishi Electric Corporation:MELSEC iQ-R Series R02CPU versions 35 and prior, Mitsubishi Electric Corporation:MELSEC iQ-R Series R04CPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R04ENCPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R08CPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R08ENCPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R08PCPU versions from 3 to 37, Mitsubishi Electric Corporation:MELSEC iQ-R Series R08SFCPU versions from 26 to 31, Mitsubishi Electric Corporation:MELSEC iQ-R Series R120CPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R120ENCPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R120PCPU versions from 3 to 37, Mitsubishi Electric Corporation:MELSEC iQ-R Series R120SFCPU versions from 26 to 31, Mitsubishi Electric Corporation:MELSEC iQ-R Series R16CPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R16ENCPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R16PCPU versions from 3 to 37, Mitsubishi Electric Corporation:MELSEC iQ-R Series R16SFCPU versions from 26 to 31, Mitsubishi Electric Corporation:MELSEC iQ-R Series R32CPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R32ENCPU versions from 12 to 68, Mitsubishi Electric Corporation:MELSEC iQ-R Series R32PCPU versions from 3 to 37, Mitsubishi Electric Corporation:MELSEC iQ-R Series R32SFCPU versions from 26 to 31

Sources

euvd EUVD-2023-23677

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Description

References