SARA / Free Tools / CVE / CVE-2023-7033

CVE-2023-7033 — Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Elec

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module,

CVSS
5.3 MEDIUM
EPSS
0.08% (top 77.40%)
CWE
CWE-410
Published
2024-02-27T03:47:04.725Z
Last modified
2025-01-16T04:31:21.198Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

01What is this vulnerability?

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN -…

02Affected products

VendorProductVersions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R00CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R01CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R02CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R04CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R08CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R16CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R32CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R120CPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R04ENCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R08ENCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R16ENCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R32ENCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R120ENCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R08SFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R16SFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R32SFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R120SFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R08PCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R16PCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R32PCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R120PCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R08PSFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R16PSFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R32PSFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR series CPU module R120PSFCPU — all versions
Mitsubishi Electric CorporationMELSEC iQL series CPU module L04HCPU — all versions
Mitsubishi Electric CorporationMELSEC iQL series CPU module L08HCPU — all versions
Mitsubishi Electric CorporationMELSEC iQL series CPU module L16HCPU — all versions
Mitsubishi Electric CorporationMELSEC iQL series CPU module L32HCPU — all versions
Mitsubishi Electric CorporationMELSEC iQR Ethernet Interface Module RJ71EN71 — all versions
Mitsubishi Electric CorporationMELSEC iQR CC-Link IE TSN Master/Local Module RJ71GN11-T2 — all versions
Mitsubishi Electric CorporationMELSEC iQR CC-Link IE TSN Master/Local Module RJ71GN11-SX — all versions
Mitsubishi Electric CorporationMELSEC iQR CC-Link IE TSN Master/Local Module RJ71GN11-EIP — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-32D — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-32T — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-32TE — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-32DT — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-32DTE — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-16D — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-16T — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2B1-16TE — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-32D — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-32T — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-32TE — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-32DT — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-32DTE — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-16D — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-16T — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GN2S1-16TE — all versions
Mitsubishi Electric CorporationCCLink IE TSN Remote I/O Module NZ2GNCF1-32D — all versions

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →