Republished vendor advisory. This ICSA is a verbatim republication of Mitsubishi Electric 2024-007 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does…
Credit: Mitsubishi Electric
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-7316 | CWE-1284 Improper Validation of Specified Quantity in Input | 5.9 Medium |
Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability exists in Mitsubishi Electric CNC Series. This vulnerability could allow a remote attacker to cause a denial of service (DoS) condition in the affected product by sending specially crafted packets to TCP port 683, causing an emergency stop. In addition, system reset is required for recovery. CISA SSVC — Exploitation: None · Automatable: Yes · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version B2 or later for Mitsubishi Electric CNC M800V/M80V Series M800VW (BND-2051W000-**), M800VS (BND-2052W000-**), M80V (BND-2053W000-**), and M80VW (BND-2054W000-**). Please apply the fixed version to the product. Fo… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version FJ or later for Mitsubishi Electric CNC M800/M80/E80 Series M800W (BND-2005W000-**), M800S (BND-2006W000-**), M80 (BND-2007W000-**), M80W (BND-2008W000-**), and E80 (BND-2009W000-**). Please apply the fixed versi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version BK or later for Mitsubishi Electric CNC C80 Series C80 (BND-2036W000-**). Please apply the fixed version to the product. For instructions on how to apply it, please consult your nearest Mitsubishi Electric repres… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version LH or later for Mitsubishi Electric CNC M700V/M70V/E70 Series M750VW (BND-1015W002-**), M730VW (BND-1015W000-**), M720VW (BND-1015W000-**), M750VS (BND-1012W002-**), M730VS (BND-1012W000-**), M720VS (BND-1012W000-**), M70V (BND-1018W000-**), and E70 (BND-1022W000-**). Please apply the fixed version to the product. For instructions on how to apply it,… Mitigation: For customers who cannot immediately update the product, Mitsubishi Electric recommends using a firewall, virtual private network (VPN), etc. to prevent unauthorized access when internet access is required, to minimize the risk of exploiting this vulnerability. Mitigation: For customers who cannot immediately update the product, Mitsubishi Electric recommends installing anti-virus software on your PC that can access the affected product, to minimize the risk of exploiting this vulnerability. Mitigation: For customers who cannot immediately update the product, Mitsubishi Electric recommends using within a LAN and blocking access from untrusted networks and hosts through firewalls, to minimize the risk of exploiting this vulnerability. Mitigation: For customers who cannot immediately update the product, Mitsubishi Electric recommends restricting physical access to the products and the LAN to which they are connected, to minimize the risk of exploiting this vulnerability. Mitigation: For customers who cannot immediately update the product, Mitsubishi Electric recommends using the IP filter function of the affected product to block access from untrusted hosts and minimize the risk of exploiting this vulnerability. The IP filter function is available for M800V/M80V series and M800/M80/E80 series. For details on the IP filter function, refer to "16. Appendix 3 IP Address Filter … |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-7316 | 5.9 Medium | Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause … |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.