cbcvebase.
CVE-2024-1915
published 2024-03-15

CVE-2024-1915: Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated…

PriorityP264critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.04%
59.8th percentile
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
mitsubishi_electric_corporationmelsec-l_series_l02cpu——
mitsubishi_electric_corporationmelsec-l_series_l02cpu-p——
mitsubishi_electric_corporationmelsec-l_series_l06cpu——
mitsubishi_electric_corporationmelsec-l_series_l06cpu-p——
mitsubishi_electric_corporationmelsec-l_series_l26cpu——
mitsubishi_electric_corporationmelsec-l_series_l26cpu-bt——
mitsubishi_electric_corporationmelsec-l_series_l26cpu-p——
mitsubishi_electric_corporationmelsec-l_series_l26cpu-pbt——
mitsubishi_electric_corporationmelsec-q_series_q03udecpu——
mitsubishi_electric_corporationmelsec-q_series_q03udvcpu——
mitsubishi_electric_corporationmelsec-q_series_q04udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q04udpvcpu——
mitsubishi_electric_corporationmelsec-q_series_q04udvcpu——
mitsubishi_electric_corporationmelsec-q_series_q06udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q06udpvcpu——
mitsubishi_electric_corporationmelsec-q_series_q06udvcpu——
mitsubishi_electric_corporationmelsec-q_series_q100udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q10udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q13udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q13udpvcpu——
mitsubishi_electric_corporationmelsec-q_series_q13udvcpu——
mitsubishi_electric_corporationmelsec-q_series_q20udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q26udehcpu——
mitsubishi_electric_corporationmelsec-q_series_q26udpvcpu——
mitsubishi_electric_corporationmelsec-q_series_q26udvcpu——

Detection & IOCsextracted from sources · hover to see the quote

  • →Trigger condition: remote unauthenticated attacker sends a specially crafted packet to exploit Incorrect Pointer Scaling (CWE-468) on MELSEC-Q/L Series CPU modules, potentially enabling arbitrary code execution ↗
  • →Alert on any direct internet-facing exposure of MELSEC-Q/L Series PLCs; advisory explicitly warns these devices should not be accessible from the internet ↗
  • ·Affected MELSEC-Q Series CPU modules are those with the first 5 digits of serial No. '26061' and prior; fixed versions have serial No. '26062' or later — use serial number as a version gate in asset inventory checks ↗
  • ·Affected MELSEC-L Series CPU modules are those with the first 5 digits of serial No. '26041' and prior; fixed versions have serial No. '26042' or later ↗
  • ·No known public exploitation specifically targeting these vulnerabilities has been reported at time of advisory publication ↗
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.