Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishi Electric Corporation | MELSEC | Q Series Q03UDECPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q04UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q06UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q10UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q13UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q20UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q26UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q50UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q100UDEHCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q03UDVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q04UDVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q06UDVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q13UDVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q26UDVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q04UDPVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q06UDPVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q13UDPVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | Q Series Q26UDPVCPU — The first 5 digits of serial No. "26061" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L02CPU — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L06CPU — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L26CPU — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L02CPU-P — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L06CPU-P — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L26CPU-P — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L26CPU-BT — The first 5 digits of serial No. "26041" and prior |
| Mitsubishi Electric Corporation | MELSEC | L Series L26CPU-PBT — The first 5 digits of serial No. "26041" and prior |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.