9.8
Critical
CVE-2024-1915 Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU…
Description
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC-Q Series Q03UDECPU | Versions not published | |
| MELSEC-Q Series Q04UDEHCPU | Versions not published | |
| MELSEC-Q Series Q06UDEHCPU | Versions not published | |
| MELSEC-Q Series Q10UDEHCPU | Versions not published | |
| MELSEC-Q Series Q13UDEHCPU | Versions not published | |
| MELSEC-Q Series Q20UDEHCPU | Versions not published | |
| MELSEC-Q Series Q26UDEHCPU | Versions not published | |
| MELSEC-Q Series Q50UDEHCPU | Versions not published | |
| MELSEC-Q Series Q100UDEHCPU | Versions not published |
Show the 42 other branches Hide the 42 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC-Q Series Q03UDVCPU | Versions not published | |
| MELSEC-Q Series Q04UDVCPU | Versions not published | |
| MELSEC-Q Series Q06UDVCPU | Versions not published | |
| MELSEC-Q Series Q13UDVCPU | Versions not published | |
| MELSEC-Q Series Q26UDVCPU | Versions not published | |
| MELSEC-Q Series Q04UDPVCPU | Versions not published | |
| MELSEC-Q Series Q06UDPVCPU | Versions not published | |
| MELSEC-Q Series Q13UDPVCPU | Versions not published | |
| MELSEC-Q Series Q26UDPVCPU | Versions not published | |
| MELSEC-L Series L02CPU | Versions not published | |
| MELSEC-L Series L06CPU | Versions not published | |
| MELSEC-L Series L26CPU | Versions not published | |
| MELSEC-L Series L02CPU-P | Versions not published | |
| MELSEC-L Series L06CPU-P | Versions not published | |
| MELSEC-L Series L26CPU-P | Versions not published | |
| MELSEC-L Series L26CPU-BT | Versions not published | |
| MELSEC-L Series L26CPU-PBT | Versions not published | |
| melsec_q-q03udecpu | Versions not published | |
| melsec_q-q04udehcpu | Versions not published | |
| melsec_q-q06udehcpu | Versions not published | |
| melsec_q-q10udehcpu | Versions not published | |
| melsec_q-q13udehcpu | Versions not published | |
| melsec_q-q20udehcpu | Versions not published | |
| melsec_q-q26udehcpu | Versions not published | |
| melsec_q-q50udehcpu | Versions not published | |
| melsec_q-q100udehcpu | Versions not published | |
| melsec_q03udvcpu | Versions not published | |
| melsec_q04udvcpu | Versions not published | |
| melsec_q06udvcpu | Versions not published | |
| melsec_q13udvcpu | Versions not published | |
| melsec_q26udvcpu | Versions not published | |
| melsec_q06udpvcpu | Versions not published | |
| melsec_q13udpvcpu | Versions not published | |
| melsec_q26udpvcpu | Versions not published | |
| l02cpu-p | Versions not published | |
| melsec_l06cpu\(-p\) | Versions not published | |
| melsec_l26cpu\(-p\) | Versions not published | |
| melsec_l02cpu-p | Versions not published | |
| melsec_l06cpu-p | Versions not published | |
| melsec_l26cpu-p | Versions not published | |
| l26cpu-bt | Versions not published | |
| melsec_l26cpu-pbt | Versions not published |
Other CVEs of MELSEC-Q Series Q03UDECPU
The 6 CVEs of MELSEC-Q Series Q03UDECPU →
CVE-2024-1917
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series…
9.8
Critical
CVE-2024-1916
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series…
9.8
Critical
CVE-2024-0803
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series…
9.8
Critical
CVE-2024-0802
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU…
9.8
Critical