Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series
Priority LOW 27CWE-1284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00563 47th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M800V Series M800VW | System Number BND-2051W000 versions B1 and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M800V Series M800VS | System Number BND-2052W000 versions B1 and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M80V Series M80V | System Number BND-2053W000 versions B1 and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M80V Series M80VW | System Number BND-2054W000 versions B1 and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M800 Series M800W | System Number BND-2005W000 versions FH and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M800 Series M800S | System Number BND-2006W000 versions FH and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M80 Series M80 | System Number BND-2007W000 versions FH and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M80 Series M80W | System Number BND-2008W000 versions FH and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC E80 Series E80 | System Number BND-2009W000 versions FH and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC C80 Series C80 | System Number BND-2036W000 versions BJ and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M700V Series M720VW | System Number BND-1015W000 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M700V Series M730VW | System Number BND-1015W000 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M700V Series M750VW | System Number BND-1015W002 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M700V Series M720VS | System Number BND-1012W000 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M700V Series M730VS | System Number BND-1012W000 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M700V Series M750VS | System Number BND-1012W002 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC M70V Series M70V | System Number BND-1018W000 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC E70 Series E70 | System Number BND-1022W000 versions LG and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC Software Tools NC Trainer2 | System Number BND-1802W000 all versions | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Mitsubishi Electric CNC Software Tools NC Trainer2 plus | System Number BND-1803W000 all versions | — | No fix listed | CNA |
- Mitsubishi Electric CNC M800V Series M800VW VendorMitsubishi Electric Corporation Affected System Number BND-2051W000 versions B1 and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M800V Series M800VS VendorMitsubishi Electric Corporation Affected System Number BND-2052W000 versions B1 and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M80V Series M80V VendorMitsubishi Electric Corporation Affected System Number BND-2053W000 versions B1 and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M80V Series M80VW VendorMitsubishi Electric Corporation Affected System Number BND-2054W000 versions B1 and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M800 Series M800W VendorMitsubishi Electric Corporation Affected System Number BND-2005W000 versions FH and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M800 Series M800S VendorMitsubishi Electric Corporation Affected System Number BND-2006W000 versions FH and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M80 Series M80 VendorMitsubishi Electric Corporation Affected System Number BND-2007W000 versions FH and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M80 Series M80W VendorMitsubishi Electric Corporation Affected System Number BND-2008W000 versions FH and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC E80 Series E80 VendorMitsubishi Electric Corporation Affected System Number BND-2009W000 versions FH and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC C80 Series C80 VendorMitsubishi Electric Corporation Affected System Number BND-2036W000 versions BJ and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M700V Series M720VW VendorMitsubishi Electric Corporation Affected System Number BND-1015W000 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M700V Series M730VW VendorMitsubishi Electric Corporation Affected System Number BND-1015W000 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M700V Series M750VW VendorMitsubishi Electric Corporation Affected System Number BND-1015W002 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M700V Series M720VS VendorMitsubishi Electric Corporation Affected System Number BND-1012W000 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M700V Series M730VS VendorMitsubishi Electric Corporation Affected System Number BND-1012W000 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M700V Series M750VS VendorMitsubishi Electric Corporation Affected System Number BND-1012W002 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC M70V Series M70V VendorMitsubishi Electric Corporation Affected System Number BND-1018W000 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC E70 Series E70 VendorMitsubishi Electric Corporation Affected System Number BND-1022W000 versions LG and prior Fixed in — No fix listed CNA
- Mitsubishi Electric CNC Software Tools NC Trainer2 VendorMitsubishi Electric Corporation Affected System Number BND-1802W000 all versions Fixed in — No fix listed CNA
- Mitsubishi Electric CNC Software Tools NC Trainer2 plus VendorMitsubishi Electric Corporation Affected System Number BND-1803W000 all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-7316
- 2026-10-03 Alias added: GHSA-jgg2-5cv9-85wh
References
More Mitsubishi Electric Corporation vulnerabilities
- TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
- TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
- TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
- TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
- TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
- TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-7316 · CVE Program
- CVE-2024-7316 · NVD
- FIRST EPSS
- GHSA-jgg2-5cv9-85wh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences