Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-1917

CVSS 9.8 · Critical EPSS 0.43% · P62
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-1917

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
整数溢出或超界折返
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mitsubishi Electric MELSEC-Q和MELSEC-L 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mitsubishi Electric MELSEC-Q Series是日本三菱电机（Mitsubishi Electric）公司的一款MELSEC-Q系列的可编程逻辑控制器。 Mitsubishi Electric MELSEC-Q和MELSEC-L存在输入验证错误漏洞，该漏洞源于CPU模块中存在整数溢出或环绕漏洞，允许未经身份验证的远程攻击者通过发送特制数据包在目标产品上执行恶意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Mitsubishi Electric CorporationMELSEC-Q Series Q03UDECPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q04UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q06UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q10UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q13UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q20UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q26UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q50UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q100UDEHCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q03UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q04UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q06UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q13UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q26UDVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q04UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q06UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q13UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-Q Series Q26UDPVCPU The first 5 digits of serial No. "26061" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L02CPU The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L06CPU The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L02CPU-P The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L06CPU-P The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU-P The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU-BT The first 5 digits of serial No. "26041" and prior -
Mitsubishi Electric CorporationMELSEC-L Series L26CPU-PBT The first 5 digits of serial No. "26041" and prior -

II. Public POCs for CVE-2024-1917

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-1917

请登录查看更多情报信息。

Same Patch Batch · Mitsubishi Electric Corporation · 2024-03-15 · 3 CVEs total

CVE-2024-19159.8 CRITICALMitsubishi Electric MELSEC-Q和MELSEC-L 安全漏洞
CVE-2024-19169.8 CRITICALMitsubishi Electric MELSEC-Q和MELSEC-L 输入验证错误漏洞

IV. Related Vulnerabilities

Same product: MELSEC-Q Series Q03UDECPU
Same vendor: Mitsubishi Electric Corporation
Same weakness: CWE-190

V. Comments for CVE-2024-1917

No comments yet

Leave a comment