Skip to content
Fencer Vulns
medium 5.9

CVE-2024-7316 json

Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

published 2024-10-17 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-48257

cvss
5.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 47%
public exploits
0
none known

Summary

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-291-03 updated cvss 5.9

Mitsubishi Electric CNC Series (Update D)

  • Mitsubishi Electric CNC C80 Series C80 (BND-2036W000-**) <=BJ Mitsubishi Electric CNC M700V/M70V/E70 Series E70 (BND-1022W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M70V (BND-1018W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M720VS (BND-1012W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M720VW (BND-1015W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M730VS (BND-1012W000-**) <=LG
    +12 more products
    Mitsubishi Electric CNC M700V/M70V/E70 Series M730VW (BND-1015W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M750VS (BND-1012W002-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M750VW (BND-1015W002-**) <=LG Mitsubishi Electric CNC M800/M80/E80 Series E80 (BND-2009W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M80 (BND-2007W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M80W (BND-2008W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M800S (BND-2006W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M800W (BND-2005W000-**) <=FH Mitsubishi Electric CNC M800V/M80V Series M80V (BND-2053W000-**) <=B1 Mitsubishi Electric CNC M800V/M80V Series M80VW (BND-2054W000-**) <=B1 Mitsubishi Electric CNC M800V/M80V Series M800VS (BND-2052W000-**) <=B1 Mitsubishi Electric CNC M800V/M80V Series M800VW (BND-2051W000-**) <=B1
    affected: vendor fix, mitigation mitsubishielectric.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.56% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80V Series M80V
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80V Series M80VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800 Series M800W
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800 Series M800S
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80 Series M80
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80 Series M80W
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC E80 Series E80
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC C80 Series C80
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M720VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M730VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M750VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M720VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M730VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M750VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M70V Series M70V
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC E70 Series E70
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC Software Tools NC Trainer2
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC Software Tools NC Trainer2 plus

Classification

Weakness
  • CWE-1284 Improper Validation of Specified Quantity in Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.