CVE-2023-1424 (melsec_iq-fx5u-32mr/ds_firmware, melsec_iq-fx5u-32mr/dss_firmware, melsec_iq-fx5u-32mr/es_firmware, melsec_iq-fx5u-32mr/ess_firmware, melsec_iq-fx5u-32mt/ds_firmware, melsec_iq-fx5u-32mt/dss_firmware, melsec_iq-fx5u-32mt/es_firmware, m

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

buffer buffer overflow code copy cpu cve denial of service dos electric input malicious mitsubishi mitsubishi electric modules overflow packets product reset series service size system target vulnerability