Critical severity · published Aug 3, 2023
CVE-2023-3346
Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
9.8
CVSS
2.1%
EPSS
No
On KEV
Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
MITSUBISHI CNC C80 Series C80 · Mitsubishi Electric Corporation
System Number BND-2036W000 versions BF and prior · source: vendor
MC
MITSUBISHI CNC E70 Series E70 · Mitsubishi Electric Corporation
System Number BND-1022W000 versions LF and prior · source: vendor
MC
MITSUBISHI CNC E80 Series E80 · Mitsubishi Electric Corporation
System Number BND-2009W000 versions FB and prior · source: vendor
MC
MITSUBISHI CNC IoT Unit Data Acquisition Unit · Mitsubishi Electric Corporation
System Number BND-2041W002 all versions · source: vendor
MC
MITSUBISHI CNC IoT Unit Remote Service Gateway Unit · Mitsubishi Electric Corporation
System Number BND-2041W001 versions AD and prior · source: vendor
MC
MITSUBISHI CNC M700V Series M720VS · Mitsubishi Electric Corporation
System Number BND-1012W000 versions LF and prior · source: vendor
MC
MITSUBISHI CNC M700V Series M720VW · Mitsubishi Electric Corporation
System Number BND-1015W000 versions LF and prior · source: vendor
MC
MITSUBISHI CNC M700V Series M730VS · Mitsubishi Electric Corporation
System Number BND-1012W000 versions LF and prior · source: vendor
MC
MITSUBISHI CNC M700V Series M730VW · Mitsubishi Electric Corporation
System Number BND-1015W000 versions LF and prior · source: vendor
MC
MITSUBISHI CNC M700V Series M750VS · Mitsubishi Electric Corporation
System Number BND-1012W002 versions LF and prior · source: vendor
MC
MITSUBISHI CNC M700V Series M750VW · Mitsubishi Electric Corporation
System Number BND-1015W002 versions LF and prior · source: vendor
MC
MITSUBISHI CNC M70V Series M70V · Mitsubishi Electric Corporation
System Number BND-1018W000 versions LF and prior · source: vendor
Affected product
MC
MITSUBISHI CNC C80 Series C80
Mitsubishi Electric Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-3346
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-3346
Third Party Advisory
https://jvn.jp/vu/JVNVU90352157/index.html
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-03
Vendor Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-007_en.pdf