Main Vulnerability Database Vulnerabilities #VU76484

#VU76484 Buffer overflow in Mitsubishi Electric products - CVE-2023-1424

Published: May 24, 2023 / Updated: May 29, 2023

Vulnerability identifier: #VU76484

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2023-1424

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
MELSEC iQ-F FX5U
MELSEC iQ-F FX5UC
MELSEC iQ-F FX5UC-32MT/DS-TS
MELSEC iQ-F FX5UC-32MT/DSS-TS
MELSEC iQ-F FX5UC-32MR/DS-TS

Software vendor:
Mitsubishi Electric

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.