9.8
Critical
CVE-2023-3346 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a…
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MITSUBISHI CNC M800V Series M800VW | Versions not published | |
| MITSUBISHI CNC M800V Series M800VS | Versions not published | |
| MITSUBISHI CNC M80V Series M80V | Versions not published | |
| MITSUBISHI CNC M80V Series M80VW | Versions not published | |
| MITSUBISHI CNC M800 Series M800W | Versions not published | |
| MITSUBISHI CNC M800 Series M800S | Versions not published | |
| MITSUBISHI CNC M80 Series M80 | Versions not published | |
| MITSUBISHI CNC M80 Series M80W | Versions not published | |
| MITSUBISHI CNC E80 Series E80 | Versions not published |
Show the 11 other branches Hide the 11 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MITSUBISHI CNC C80 Series C80 | Versions not published | |
| MITSUBISHI CNC M700V Series M720VW | Versions not published | |
| MITSUBISHI CNC M700V Series M730VW | Versions not published | |
| MITSUBISHI CNC M700V Series M750VW | Versions not published | |
| MITSUBISHI CNC M700V Series M720VS | Versions not published | |
| MITSUBISHI CNC M700V Series M730VS | Versions not published | |
| MITSUBISHI CNC M700V Series M750VS | Versions not published | |
| MITSUBISHI CNC M70V Series M70V | Versions not published | |
| MITSUBISHI CNC E70 Series E70 | Versions not published | |
| MITSUBISHI CNC IoT Unit Remote Service Gateway Unit | Versions not published | |
| MITSUBISHI CNC IoT Unit Data Acquisition Unit | Versions not published |