Skip to content
Fencer Vulns
critical 10.0

CVE-2023-1424 json

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

published 2023-05-24 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-23677

cvss
10.0
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
3.4%
EPSS 3.4% chance of exploitation in 30 days, percentile 89%
public exploits
0
none known

Summary

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Patch / fix

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-143-03 updated cvss 10.0

Mitsubishi Electric MELSEC Series CPU module (Update D)

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/DS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/ES, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DSS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ESS, Serial number 17X**** or later >=1.220, <=1.281
    +34 more products
    Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/DS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/ES, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DSS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ESS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/DS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/ES, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DSS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ES, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ESS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/D, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/D, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/DSS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/D, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/DSS, Serial number 17X**** or later >=1.220, <=1.281 Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU <=35 Mitsubishi Electric Corporation MELSEC iQ-R Series R01CPU <=35 Mitsubishi Electric Corporation MELSEC iQ-R Series R02CPU <=35 Mitsubishi Electric Corporation MELSEC iQ-R Series R04(EN)CPU >=12, <=68 Mitsubishi Electric Corporation MELSEC iQ-R Series R08(EN)CPU >=12, <=68 Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU >=3, <=37 Mitsubishi Electric Corporation MELSEC iQ-R Series R08SFCPU >=26, <=31 Mitsubishi Electric Corporation MELSEC iQ-R Series R16(EN)CPU >=12, <=68 Mitsubishi Electric Corporation MELSEC iQ-R Series R16PCPU >=3, <=37 Mitsubishi Electric Corporation MELSEC iQ-R Series R16SFCPU >=26, <=31 Mitsubishi Electric Corporation MELSEC iQ-R Series R32(EN)CPU >=12, <=68 Mitsubishi Electric Corporation MELSEC iQ-R Series R32PCPU >=3, <=37 Mitsubishi Electric Corporation MELSEC iQ-R Series R32SFCPU >=26, <=31
    affected: vendor fix, mitigation “Mitsubishi Electric created the following firmware versions to address this issue and encourages users to update:” mitsubishielectric.com

3 more affected in the full advisory

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
20 mo ago

Exploit prediction

3.44% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD 3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ES
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/ES
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/ES
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/ES
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/DS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/DS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/DS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ESS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ESS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ESS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DSS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DSS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DSS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/D
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/D
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/D
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/DSS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/DSS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R01CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R02CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R04CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120CPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R04ENCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08ENCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16ENCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32ENCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120ENCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08SFCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16SFCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32SFCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120SFCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R16PCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R32PCPU
  • Mitsubishi Electric Corporation MELSEC iQ-R Series R120PCPU

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.