Skip to content
Fencer Vulns
critical 9.8

CVE-2023-3346 json

Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series

published 2023-08-03 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-44014

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
2.1%
EPSS 2.1% chance of exploitation in 30 days, percentile 81%
public exploits
0
none known

Summary

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-208-03 updated cvss 9.8

Mitsubishi Electric CNC Series (Update E)

  • Mitsubishi Electric C80 (BND-2036W000-**) <=BF
    affected: vendor fix, mitigation “Mitsubishi Electric has provided a fix for the following products:” mitsubishielectric.com
  • Mitsubishi Electric Data Acquisition Unit (BND-2041W002-**)
    affected: mitigation “Mitsubishi Electric has provided a fix for the following products:” mitsubishielectric.com
  • Mitsubishi Electric E70 (BND-1022W000-**) <=LF Mitsubishi Electric E80 (BND-2009W000-**) <=FB Mitsubishi Electric M70V (BND-1018W000-**) <=LF Mitsubishi Electric M80 (BND-2007W000-**) <=FB Mitsubishi Electric M80V (BND-2053W000-**) <=A8 Mitsubishi Electric M80VW (BND-2054W000-**) <=A8
    +10 more products
    Mitsubishi Electric M80W (BND-2008W000-**) <=FB Mitsubishi Electric M730VS/M720VS (BND-1012W000-**) <=LF Mitsubishi Electric M730VW/M720VW (BND-1015W000-**) <=LF Mitsubishi Electric M750VS (BND-1012W002-**) <=LF Mitsubishi Electric M750VW (BND-1015W002-**) <=LF Mitsubishi Electric M800S (BND-2006W000-**) <=FB Mitsubishi Electric M800VS (BND-2052W000-**) <=A8 Mitsubishi Electric M800VW (BND-2051W000-**) <=A8 Mitsubishi Electric M800W (BND-2005W000-**) <=FB Mitsubishi Electric Remote Service Gateway Unit (BND-2041W001-**) <=AD
    affected: vendor fix, mitigation “Mitsubishi Electric has provided a fix for the following products:” mitsubishielectric.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
23 mo ago

Exploit prediction

2.10% chance of exploitation in the next 30 days, higher than 81% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Mitsubishi Electric Corporation MITSUBISHI CNC M800V Series M800VW
  • Mitsubishi Electric Corporation MITSUBISHI CNC M800V Series M800VS
  • Mitsubishi Electric Corporation MITSUBISHI CNC M80V Series M80V
  • Mitsubishi Electric Corporation MITSUBISHI CNC M80V Series M80VW
  • Mitsubishi Electric Corporation MITSUBISHI CNC M800 Series M800W
  • Mitsubishi Electric Corporation MITSUBISHI CNC M800 Series M800S
  • Mitsubishi Electric Corporation MITSUBISHI CNC M80 Series M80
  • Mitsubishi Electric Corporation MITSUBISHI CNC M80 Series M80W
  • Mitsubishi Electric Corporation MITSUBISHI CNC E80 Series E80
  • Mitsubishi Electric Corporation MITSUBISHI CNC C80 Series C80
  • Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M720VW
  • Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M730VW
  • Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M750VW
  • Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M720VS
  • Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M730VS
  • Mitsubishi Electric Corporation MITSUBISHI CNC M700V Series M750VS
  • Mitsubishi Electric Corporation MITSUBISHI CNC M70V Series M70V
  • Mitsubishi Electric Corporation MITSUBISHI CNC E70 Series E70
  • Mitsubishi Electric Corporation MITSUBISHI CNC IoT Unit Remote Service Gateway Unit
  • Mitsubishi Electric Corporation MITSUBISHI CNC IoT Unit Data Acquisition Unit

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.