Read the docs
TI-2023-01345 Aliases CVE-2023-1424GHSA-jrmr-8594-crxx

Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Priority MEDIUM 55CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0344 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/ESall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/ESall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/ESall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/DSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/DSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/DSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/Dall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/Dall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/Dall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DSSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DSSall versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DS-TSversions from 1.220 to 1.281—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS-TSversions from 1.220 to 1.281—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MR/DS-TSversions from 1.220 to 1.281—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R00CPUup to 35—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R01CPUup to 35—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R02CPUup to 35—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R04CPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08CPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16CPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32CPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120CPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R04ENCPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08ENCPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16ENCPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32ENCPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120ENCPUversions from 12 to 68—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08SFCPUversions from 26 to 31—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16SFCPUversions from 26 to 31—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32SFCPUversions from 26 to 31—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120SFCPUversions from 26 to 31—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08PCPUversions from 3 to 37—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16PCPUversions from 3 to 37—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32PCPUversions from 3 to 37—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120PCPUversions from 3 to 37—No fix listedCNA

CPE configurations NVD · 78

CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mr\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mr\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mr\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mr\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mr\/es_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mr\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mr\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mt\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mt\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
Show 68 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mt\/es_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-32mt\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-32mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mr\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mr\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mr\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mr\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mr\/es_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mr\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mr\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mt\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mt\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mt\/es_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-64mt\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-64mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mr\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mr\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mr\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mr\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mr\/es_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mr\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mr\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mt\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mt\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mt\/es_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5u-80mt\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5u-80mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mr\/dds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mr\/dds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mr\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mr\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mr\/ds-ts_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mr\/ds-ts:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mt\/dds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mt\/dds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mt\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mt\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mt\/dss-ts_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mt\/dss-ts:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-32mt\/ds-ts_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-32mt\/ds-ts:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-64mr\/dds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-64mr\/dds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-64mr\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-64mr\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-64mt\/dds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-64mt\/dds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-64mt\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-64mt\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-96mr\/dds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-96mr\/dds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-96mr\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-96mr\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-96mt\/dds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-96mt\/dds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:melsec_iq-fx5uc-96mt\/ds_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:melsec_iq-fx5uc-96mt\/ds:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1424
  2. 2026-10-03 Alias added: GHSA-jrmr-8594-crxx

References

  • TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
  • TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
  • TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
  • TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
  • TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
  • TI-2025-03259 Missing authentication in Mitsubishi Electric Corporation G-50 CVSS 3.1CRITICAL 9.8
See all 151 →

Sources