Back to Database
Status published
Critical
CVE-2023-3346
Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
Vulnerability Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-3346
Credits & Attribution
No credits recorded in the NVD database.
References
More from Mitsubishi Electric Corporation
View All →CVE-2025-8531
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...
Medium
6.8
CVE-2025-7731
Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
High
7.5
CVE-2025-7405
Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module
High
7.3
CVE-2025-7376
Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS
Medium
5.9
CVE-2025-5514
Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module
Medium
5.3
Affected Vendor
Mitsubishi Electric Corporation
View all reports →Affected Software
MITSUBISHI CNC M800V Series M800VW, MITSUBISHI CNC M800V Series M800VS, MITSUBISHI CNC M80V Series M80V, MITSUBISHI CNC M80V Series M80VW, MITSUBISHI CNC M800 Series M800W, MITSUBISHI CNC M800 Series M800S, MITSUBISHI CNC M80 Series M80, MITSUBISHI CNC M80 Series M80W, MITSUBISHI CNC E80 Series E80, MITSUBISHI CNC C80 Series C80, MITSUBISHI CNC M700V Series M720VW, MITSUBISHI CNC M700V Series M730VW, MITSUBISHI CNC M700V Series M750VW, MITSUBISHI CNC M700V Series M720VS, MITSUBISHI CNC M700V Series M730VS, MITSUBISHI CNC M700V Series M750VS, MITSUBISHI CNC M70V Series M70V, MITSUBISHI CNC E70 Series E70, MITSUBISHI CNC IoT Unit Remote Service Gateway Unit, MITSUBISHI CNC IoT Unit Data Acquisition Unit
Vulnerable Versions:
System Number BND-2051W000 versions A8 and prior, System Number BND-2052W000 versions A8 and prior, System Number BND-2053W000 versions A8 and prior, System Number BND-2054W000 versions A8 and prior, System Number BND-2005W000 versions FB and prior, System Number BND-2006W000 versions FB and prior, System Number BND-2007W000 versions FB and prior, System Number BND-2008W000 versions FB and prior, System Number BND-2009W000 versions FB and prior, System Number BND-2036W000 versions BF and prior, System Number BND-1015W000 versions LF and prior, System Number BND-1015W002 versions LF and prior, System Number BND-1012W000 versions LF and prior, System Number BND-1012W002 versions LF and prior, System Number BND-1018W000 versions LF and prior, System Number BND-1022W000 versions LF and prior, System Number BND-2041W001 versions AD and prior, System Number BND-2041W002 all versions
Timeline
Official Publish:
August 3rd, 2023
Last Modified:
December 4th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H