cbcvebase.
CVE-2024-1916
published 2024-03-15

CVE-2024-1916: Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated…

PriorityP263critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.07%
60.5th percentile
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
googlechrome_chrome
mitsubishi_electric_corporationmelsec-l_series_l02cpu
mitsubishi_electric_corporationmelsec-l_series_l02cpu-p
mitsubishi_electric_corporationmelsec-l_series_l06cpu
mitsubishi_electric_corporationmelsec-l_series_l06cpu-p
mitsubishi_electric_corporationmelsec-l_series_l26cpu
mitsubishi_electric_corporationmelsec-l_series_l26cpu-bt
mitsubishi_electric_corporationmelsec-l_series_l26cpu-p
mitsubishi_electric_corporationmelsec-l_series_l26cpu-pbt
mitsubishi_electric_corporationmelsec-q_series_q03udecpu
mitsubishi_electric_corporationmelsec-q_series_q03udvcpu
mitsubishi_electric_corporationmelsec-q_series_q04udehcpu
mitsubishi_electric_corporationmelsec-q_series_q04udpvcpu
mitsubishi_electric_corporationmelsec-q_series_q04udvcpu
mitsubishi_electric_corporationmelsec-q_series_q06udehcpu
mitsubishi_electric_corporationmelsec-q_series_q06udpvcpu
mitsubishi_electric_corporationmelsec-q_series_q06udvcpu
mitsubishi_electric_corporationmelsec-q_series_q100udehcpu
mitsubishi_electric_corporationmelsec-q_series_q10udehcpu
mitsubishi_electric_corporationmelsec-q_series_q13udehcpu
mitsubishi_electric_corporationmelsec-q_series_q13udpvcpu
mitsubishi_electric_corporationmelsec-q_series_q13udvcpu
mitsubishi_electric_corporationmelsec-q_series_q20udehcpu
mitsubishi_electric_corporationmelsec-q_series_q26udehcpu
mitsubishi_electric_corporationmelsec-q_series_q26udpvcpu

Detection & IOCsextracted from sources · hover to see the quote

  • Trigger condition: remote unauthenticated attacker sends a specially crafted packet to MELSEC-Q/L Series CPU modules to exploit Integer Overflow or Wraparound (CWE-190), potentially achieving remote code execution
  • Network-facing attack with no authentication required (AV:N/AC:L/PR:N/UI:N); monitor for unexpected or malformed inbound packets to MELSEC-Q/L Series CPU modules on the OT network
  • Affected serial numbers for MELSEC-Q Series: first 5 digits of serial No. '26061' and prior; flag devices with these serial numbers communicating over untrusted networks
  • Affected serial numbers for MELSEC-L Series: first 5 digits of serial No. '26041' and prior; flag devices with these serial numbers communicating over untrusted networks
  • ·No known public exploitation specifically targeting this vulnerability has been reported at time of advisory publication
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.