CVE-2024-0802

Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target product by sending a specially crafted packet.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Published

2024-03-15

Last modified

2024-08-01

Weaknesses

CWE-468

Affected products

• Melsec L06cpu(-p) (Mitsubishi)
• Melsec L26cpu(-p) (Mitsubishi)
• Melsec Q03udvcpu (Mitsubishi)
• Melsec Q04udvcpu (Mitsubishi)
• Melsec Q06udpvcpu (Mitsubishi)
• Melsec Q06udvcpu (Mitsubishi)
• Melsec Q13udpvcpu (Mitsubishi)
• Melsec Q13udvcpu (Mitsubishi)
• Melsec Q26udpvcpu (Mitsubishi)
• Melsec Q26udvcpu (Mitsubishi)
• Melsec-l Series L02cpu (Mitsubishi Electric Corporation)
• Melsec-l Series L02cpu-p (Mitsubishi Electric Corporation)
• Melsec-l Series L06cpu (Mitsubishi Electric Corporation)
• Melsec-l Series L06cpu-p (Mitsubishi Electric Corporation)
• Melsec-l Series L26cpu (Mitsubishi Electric Corporation)
• Melsec-l Series L26cpu-bt (Mitsubishi Electric Corporation)
• Melsec-l Series L26cpu-p (Mitsubishi Electric Corporation)
• Melsec-l Series L26cpu-pbt (Mitsubishi Electric Corporation)
• Melsec-q Series Q03udecpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q03udvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q04udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q04udpvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q04udvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q06udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q06udpvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q06udvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q100udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q10udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q13udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q13udpvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q13udvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q20udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q26udehcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q26udpvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q26udvcpu (Mitsubishi Electric Corporation)
• Melsec-q Series Q50udehcpu (Mitsubishi Electric Corporation)
• L02cpu-p (Mitsubishielectric)
• L26cpu-bt (Mitsubishielectric)
• Melsec L02cpu-p (Mitsubishielectric)
• Melsec L06cpu-p (Mitsubishielectric)
• Melsec L26cpu-p (Mitsubishielectric)
• Melsec L26cpu-pbt (Mitsubishielectric)
• Melsec Q-q03udecpu (Mitsubishielectric)
• Melsec Q-q04udehcpu (Mitsubishielectric)
• Melsec Q-q06udehcpu (Mitsubishielectric)
• Melsec Q-q100udehcpu (Mitsubishielectric)
• Melsec Q-q10udehcpu (Mitsubishielectric)
• Melsec Q-q13udehcpu (Mitsubishielectric)
• Melsec Q-q20udehcpu (Mitsubishielectric)
• Melsec Q-q26udehcpu (Mitsubishielectric)
• Melsec Q-q50udehcpu (Mitsubishielectric)

References

• https://jvn.jp/vu/JVNVU99690199/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf