Log in Start free

Vulnerability · Published Mar 14, 2024 · Assigned by Mitsubishi

CVE-2024-0802

Critical 9.8

In plain English

A critical-severity security flaw in MELSEC-L Series L02CPU from Mitsubishi Electric Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.1%top 35.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target product by sending a specially crafted packet.

Affected products (as reported)

VendorProductVersions
Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q04UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q06UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q10UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q13UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q20UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q26UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q50UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q100UDEHCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q04UDVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q06UDVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q13UDVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q26UDVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q04UDPVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q06UDPVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q13UDPVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-Q Series Q26UDPVCPU The first 5 digits of serial No. "26061" and prior
Mitsubishi Electric Corporation MELSEC-L Series L02CPU The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L06CPU The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L26CPU The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L02CPU-P The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L06CPU-P The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L26CPU-P The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L26CPU-BT The first 5 digits of serial No. "26041" and prior
Mitsubishi Electric Corporation MELSEC-L Series L26CPU-PBT The first 5 digits of serial No. "26041" and prior

Weakness: CWE-468 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References