Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-1915

CVSS 9.8 · Critical EPSS 0.43% · P62
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-1915

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不正确的指针放大
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mitsubishi Electric MELSEC-Q和MELSEC-L 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mitsubishi Electric MELSEC-Q Series是日本三菱电机（Mitsubishi Electric）公司的一款MELSEC-Q系列的可编程逻辑控制器。 Mitsubishi Electric MELSEC-Q和MELSEC-L存在安全漏洞，该漏洞源于CPU模块中存在不正确指针缩放漏洞，允许未经身份验证的远程攻击者通过发送特制数据包在目标产品上执行恶意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
Mitsubishi Electric CorporationMELSEC-Q Series Q03UDECPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q04UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q06UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q10UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q13UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q20UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q26UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q50UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q100UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q03UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q04UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q06UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q13UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q26UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q04UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q06UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q13UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q26UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L02CPU The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L06CPU The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L02CPU-P The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L06CPU-P The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU-P The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU-BT The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU-PBT The first 5 digits of serial No. "26041" and prior -

II. Public POCs for CVE-2024-1915

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-1915

请登录查看更多情报信息。

Same Patch Batch · Mitsubishi Electric Corporation · 2024-03-15 · 3 CVEs total

CVE-2024-19169.8 CRITICALMitsubishi Electric MELSEC-Q和MELSEC-L 输入验证错误漏洞
CVE-2024-19179.8 CRITICALMitsubishi Electric MELSEC-Q和MELSEC-L 输入验证错误漏洞

IV. Related Vulnerabilities

Same product: MELSEC-Q Series Q03UDECPU
Same vendor: Mitsubishi Electric Corporation
Same weakness: CWE-468

V. Comments for CVE-2024-1915

No comments yet

Leave a comment