CVE-2023-3346
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk74th percentile - higher than 74% of all known CVEs
Summary
CVE-2023-3346 in MITSUBSHI CNC Series has a buffer overflow vulnerability that allows a remote unauthenticated attacker to cause a Denial of Service (DoS) condition and execute arbitrary code on the device by sending specially crafted packets. A system reset is also required for recovery.
Risk Assessment
The organization is at risk of attacks that could lead to system downtime and potential loss of control over the device, resulting in serious operational consequences.
Recommendation
It is recommended to update the device firmware and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Original NVD description (English source)
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.