Medium severity · published Oct 17, 2024
CVE-2024-7316
Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series
5.9
CVSS
0.6%
EPSS
No
On KEV
Description
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Mitsubishi Electric CNC C80 Series C80 · Mitsubishi Electric Corporation
System Number BND-2036W000 versions BJ and prior · source: vendor
ME
Mitsubishi Electric CNC E70 Series E70 · Mitsubishi Electric Corporation
System Number BND-1022W000 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC E80 Series E80 · Mitsubishi Electric Corporation
System Number BND-2009W000 versions FH and prior · source: vendor
ME
Mitsubishi Electric CNC M700V Series M720VS · Mitsubishi Electric Corporation
System Number BND-1012W000 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M700V Series M720VW · Mitsubishi Electric Corporation
System Number BND-1015W000 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M700V Series M730VS · Mitsubishi Electric Corporation
System Number BND-1012W000 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M700V Series M730VW · Mitsubishi Electric Corporation
System Number BND-1015W000 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M700V Series M750VS · Mitsubishi Electric Corporation
System Number BND-1012W002 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M700V Series M750VW · Mitsubishi Electric Corporation
System Number BND-1015W002 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M70V Series M70V · Mitsubishi Electric Corporation
System Number BND-1018W000 versions LG and prior · source: vendor
ME
Mitsubishi Electric CNC M80 Series M80 · Mitsubishi Electric Corporation
System Number BND-2007W000 versions FH and prior · source: vendor
ME
Mitsubishi Electric CNC M80 Series M80W · Mitsubishi Electric Corporation
System Number BND-2008W000 versions FH and prior · source: vendor
Affected product
ME
Mitsubishi Electric CNC C80 Series C80
Mitsubishi Electric Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7316
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7316
jvn.jp
https://jvn.jp/vu/JVNVU92054409/index.html
www.mitsubishielectric.com
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-007_en.pdf
More from Mitsubishi Electric CNC C80 Series C80
5.9
CVE-2025-2399
Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series