Lucene search

[email protected]NVD:CVE-2023-3346

HistoryAug 03, 2023 - 5:15 a.m.

CVE-2023-3346

2023-08-0305:15:10

CWE-120

[email protected]

web.nvd.nist.gov

buffer overflow

mitsubshi

cnc series

denial of service

arbitrary code execution

system reset

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.

Affected configurations

NVD

Node

mitsubishielectricc80_firmwareMatch-

AND

mitsubishielectricc80Match-

Node

mitsubishielectrice70_firmwareMatch-

AND

mitsubishielectrice70Match-

Node

mitsubishielectrice80_firmwareMatch-

AND

mitsubishielectrice80Match-

Node

mitsubishielectricm70v_firmwareMatch-

AND

mitsubishielectricm70vMatch-

Node

mitsubishielectricm720vs_firmwareMatch-

AND

mitsubishielectricm720vsMatch-

Node

mitsubishielectricm720vs_15-type_firmwareMatch-

AND

mitsubishielectricm720vs_15-typeMatch-

Node

mitsubishielectricm720vw_firmwareMatch-

AND

mitsubishielectricm720vwMatch-

Node

mitsubishielectricm730vs_firmwareMatch-

AND

mitsubishielectricm730vsMatch-

Node

mitsubishielectricm730vs_15-type_firmwareMatch-

AND

mitsubishielectricm730vs_15-typeMatch-

Node

mitsubishielectricm730vw_firmwareMatch-

AND

mitsubishielectricm730vwMatch-

Node

mitsubishielectricm750vs_firmwareMatch-

AND

mitsubishielectricm750vsMatch-

Node

mitsubishielectricm750vs_15-type_firmwareMatch-

AND

mitsubishielectricm750vs_15-typeMatch-

Node

mitsubishielectricm750vw_firmwareMatch-

AND

mitsubishielectricm750vwMatch-

Node

mitsubishielectricm80_firmwareMatch-

AND

mitsubishielectricm80Match-

Node

mitsubishielectricm800s_firmwareMatch-

AND

mitsubishielectricm800sMatch-

Node

mitsubishielectricm800vs_firmwareMatch-

AND

mitsubishielectricm800vsMatch-

Node

mitsubishielectricm800vw_firmwareMatch-

AND

mitsubishielectricm800vwMatch-

Node

mitsubishielectricm800w_firmwareMatch-

AND

mitsubishielectricm800wMatch-

Node

mitsubishielectricm80v_firmwareMatch-

AND

mitsubishielectricm80vMatch-

Node

mitsubishielectricm80vw_firmwareMatch-

AND

mitsubishielectricm80vwMatch-

Node

mitsubishielectricm80w_firmwareMatch-

AND

mitsubishielectricm80wMatch-

References

jvn.jp/vu/JVNVU90352157/index.html

www.cisa.gov/news-events/ics-advisories/icsa-23-208-03

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-007_en.pdf

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Related for NVD:CVE-2023-3346

ics1 prion1 cve1 cvelist1