Skip to content
Sign in
10.0 Critical

CVE-2023-1424 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric…

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

Affected products and versions

Product Affected versions Fixed in
MELSEC iQ-F Series FX5U-32MT/ES Versions not published
MELSEC iQ-F Series FX5U-64MT/ES Versions not published
MELSEC iQ-F Series FX5U-80MT/ES Versions not published
MELSEC iQ-F Series FX5U-32MR/ES Versions not published
MELSEC iQ-F Series FX5U-64MR/ES Versions not published
MELSEC iQ-F Series FX5U-80MR/ES Versions not published
MELSEC iQ-F Series FX5U-32MT/DS Versions not published
MELSEC iQ-F Series FX5U-64MT/DS Versions not published
MELSEC iQ-F Series FX5U-80MT/DS Versions not published
Show the 39 other branches
Product Affected versions Fixed in
MELSEC iQ-F Series FX5U-32MR/DS Versions not published
MELSEC iQ-F Series FX5U-64MR/DS Versions not published
MELSEC iQ-F Series FX5U-80MR/DS Versions not published
MELSEC iQ-F Series FX5U-32MT/ESS Versions not published
MELSEC iQ-F Series FX5U-64MT/ESS Versions not published
MELSEC iQ-F Series FX5U-80MT/ESS Versions not published
MELSEC iQ-F Series FX5U-32MT/DSS Versions not published
MELSEC iQ-F Series FX5U-64MT/DSS Versions not published
MELSEC iQ-F Series FX5U-80MT/DSS Versions not published
MELSEC iQ-F Series FX5UC-32MT/D Versions not published
MELSEC iQ-F Series FX5UC-64MT/D Versions not published
MELSEC iQ-F Series FX5UC-96MT/D Versions not published
MELSEC iQ-F Series FX5UC-32MT/DSS Versions not published
MELSEC iQ-F Series FX5UC-64MT/DSS Versions not published
MELSEC iQ-F Series FX5UC-96MT/DSS Versions not published
MELSEC iQ-F Series FX5UC-32MT/DS-TS Versions not published
MELSEC iQ-F Series FX5UC-32MT/DSS-TS Versions not published
MELSEC iQ-F Series FX5UC-32MR/DS-TS Versions not published
MELSEC iQ-R Series R00CPU Versions not published
MELSEC iQ-R Series R01CPU Versions not published
MELSEC iQ-R Series R02CPU Versions not published
MELSEC iQ-R Series R04CPU Versions not published
MELSEC iQ-R Series R08CPU Versions not published
MELSEC iQ-R Series R16CPU Versions not published
MELSEC iQ-R Series R32CPU Versions not published
MELSEC iQ-R Series R120CPU Versions not published
MELSEC iQ-R Series R04ENCPU Versions not published
MELSEC iQ-R Series R08ENCPU Versions not published
MELSEC iQ-R Series R16ENCPU Versions not published
MELSEC iQ-R Series R32ENCPU Versions not published
MELSEC iQ-R Series R120ENCPU Versions not published
MELSEC iQ-R Series R08SFCPU Versions not published
MELSEC iQ-R Series R16SFCPU Versions not published
MELSEC iQ-R Series R32SFCPU Versions not published
MELSEC iQ-R Series R120SFCPU Versions not published
MELSEC iQ-R Series R08PCPU Versions not published
MELSEC iQ-R Series R16PCPU Versions not published
MELSEC iQ-R Series R32PCPU Versions not published
MELSEC iQ-R Series R120PCPU Versions not published

Other CVEs of MELSEC iQ-F Series FX5U-32MT/ES

The 11 CVEs of MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259 Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric… 5.3 Medium CVE-2025-7731 Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series… 7.5 High CVE-2025-7405 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU… 7.3 High CVE-2025-5514 Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric… 5.3 Medium
Track this CVE