CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-3346
Critical (9.8) in mitsubishielectric. EPSS 2.1% chance of exploitation in the next 30 days.
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Severity
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mitsubishielectric:c80_firmware
- mitsubishielectric:e70_firmware
- mitsubishielectric:e80_firmware
- mitsubishielectric:m70v_firmware
- mitsubishielectric:m720vs_15-type_firmware
- mitsubishielectric:m720vs_firmware
- mitsubishielectric:m720vw_firmware
- mitsubishielectric:m730vs_15-type_firmware
- mitsubishielectric:m730vs_firmware
- mitsubishielectric:m730vw_firmware
- mitsubishielectric:m750vs_15-type_firmware
- mitsubishielectric:m750vs_firmware
- mitsubishielectric:m750vw_firmware
- mitsubishielectric:m800s_firmware
- mitsubishielectric:m800vs_firmware
- mitsubishielectric:m800vw_firmware
- mitsubishielectric:m800w_firmware
- mitsubishielectric:m80_firmware
- mitsubishielectric:m80v_firmware
- mitsubishielectric:m80vw_firmware
- mitsubishielectric:m80w_firmware