Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with the first 5 digits of serial No. "24082" to "27081" allows a remote attacker to cause an integer underflow by sending specially crafted packets to the affected product to stop Ethernet communication and the execution of control programs on the product, when the user authentication function is enabled. The user authentication function is enabled by default only when settings are configured by GX Works2, which complies with the Cybersecurity Law of the People's Republic of China, and is normally disabled.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
MELSEC-Q Series Q03UDVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q03UDVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q03UDVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q04UDVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q04UDVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q04UDVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q06UDVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q06UDVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q06UDVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q13UDVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q13UDVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q13UDVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q26UDVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q26UDVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q26UDVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q04UDPVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q04UDPVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q04UDPVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q06UDPVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q06UDPVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q06UDPVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q13UDPVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q13UDPVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q13UDPVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"
affected
Unavailable
Unavailable
Unavailable
None listed
MELSEC-Q Series Q26UDPVCPU
Vendor
Mitsubishi Electric Corporation
Product
MELSEC-Q Series Q26UDPVCPU
Platforms
Unknown
Default status
unaffected
MELSEC-Q Series Q26UDPVCPU · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
The first 5 digits of serial No. "24082" to "27081"