Mitsubishi FA Software Heap Overflow Vulnerabilities (CVE-2023-24567/24568)

Key Information 1. Vulnerability Overview CVE IDs: CVE-2023-24567, CVE-2023-24568 Affected Products: Mitsubishi Electric FA Engineering Software Products (Update H) Vulnerability Types: - Heap-based Buffer Overflow (CVE-2023-24567) 一 Improper Handling of Length Parameter Inconsistencies (CVE-2023-24568) 2. Affected Products Affected Software Versions: - GT Designer Version 1.00 to 1.22 - GX Developer Version 1.00 to 1.22 - Q Series Version 1.00 to 1.22 - K Series Version 1.00 to 1.22 - PLC Configurator Version 1.00 to 1.22 - Network Configurator Version 1.00 to 1.22 - Fx Configurator Version 1.00 to 1.22 - Melsec iQ-FX Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 - Melsec iQ-R Configurator Version 1.00 to 1.22 3. Risk Assessment CVSS Scores: - CVE-2023-24567: 9.1 (Critical) - CVE-2023-24568: 7.5 (High) 4. Technical Details Vulnerability Description: - Heap-based Buffer Overflow (CVE-2023-24567): Attackers can trigger a heap overflow by sending specially crafted packets, potentially leading to remote code execution. - Improper Handling of Length Parameter Inconsistencies (CVE-2023-24568): The software has flaws in handling inconsistent length parameters, which may result in data corruption or denial of service. 5. Mitigation Measures Recommended Actions: - Upgrade to the latest version of the software. - Apply security patches provided by the vendor. - Restrict network access to affected systems. 6. Update History Release Date: 2023-09-15 Update Record: Includes multiple updates and revisions to ensure accuracy and completeness of information.

Goal Reached Thanks to every supporter — we hit 100%!

Mitsubishi FA Software Heap Overflow Vulnerabilities (CVE-2023-24567/24568)

More from this source