CVE-2023-1424

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

State: Published
Severity: 10.0 Critical
Published: May 24, 2023
Updated: Mar 5, 2025
Reserved: Mar 16, 2023

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	Mitsubishi

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
MELSEC iQ-F Series FX5U-32MT/ESMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-64MT/ESMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-80MT/ESMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-32MR/ESMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-64MR/ESMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-80MR/ESMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-32MT/DSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-64MT/DSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-80MT/DSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-32MR/DSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-64MR/DSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-80MR/DSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-32MT/ESSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-64MT/ESSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-80MT/ESSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-32MT/DSSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-64MT/DSSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5U-80MT/DSSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-32MT/DMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-64MT/DMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-96MT/DMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-32MT/DSSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-64MT/DSSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-96MT/DSSMitsubishi Electric Corporation	Serial number 17X**** or later, versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-32MT/DS-TSMitsubishi Electric Corporation	versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-32MT/DSS-TSMitsubishi Electric Corporation	versions from 1.220 to 1.281Affected
MELSEC iQ-F Series FX5UC-32MR/DS-TSMitsubishi Electric Corporation	versions from 1.220 to 1.281Affected
MELSEC iQ-R Series R00CPUMitsubishi Electric Corporation	versions 35 and priorAffected
MELSEC iQ-R Series R01CPUMitsubishi Electric Corporation	versions 35 and priorAffected
MELSEC iQ-R Series R02CPUMitsubishi Electric Corporation	versions 35 and priorAffected
MELSEC iQ-R Series R04CPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R08CPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R16CPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R32CPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R120CPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R04ENCPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R08ENCPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R16ENCPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R32ENCPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R120ENCPUMitsubishi Electric Corporation	versions from 12 to 68Affected
MELSEC iQ-R Series R08SFCPUMitsubishi Electric Corporation	versions from 26 to 31Affected
MELSEC iQ-R Series R16SFCPUMitsubishi Electric Corporation	versions from 26 to 31Affected
MELSEC iQ-R Series R32SFCPUMitsubishi Electric Corporation	versions from 26 to 31Affected
MELSEC iQ-R Series R120SFCPUMitsubishi Electric Corporation	versions from 26 to 31Affected
MELSEC iQ-R Series R08PCPUMitsubishi Electric Corporation	versions from 3 to 37Affected
MELSEC iQ-R Series R16PCPUMitsubishi Electric Corporation	versions from 3 to 37Affected
MELSEC iQ-R Series R32PCPUMitsubishi Electric Corporation	versions from 3 to 37Affected
MELSEC iQ-R Series R120PCPUMitsubishi Electric Corporation	versions from 3 to 37Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.