CVE-2024-0803
Estado: AplazadaCrítica (9.8)—
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.04%
- Percentil entre todas las CVEs puntuadas: 63
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-190
Referencias
- https://jvn.jp/vu/JVNVU99690199/
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf
- https://jvn.jp/vu/JVNVU99690199/
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-0803",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-0803",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-03-15T16:35:33.077868Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
"affectedData": [
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q03UDECPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q04UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q06UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q10UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q13UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q20UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q26UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q50UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q100UDEHCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q03UDVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q04UDVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q06UDVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q13UDVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q26UDVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q04UDPVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q06UDPVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q13UDPVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-Q Series Q26UDPVCPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26061\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L02CPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L06CPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L26CPU",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L02CPU-P",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L06CPU-P",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L26CPU-P",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L26CPU-BT",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Mitsubishi Electric Corporation",
"product": "MELSEC-L Series L26CPU-PBT",
"versions": [
{
"status": "affected",
"version": "The first 5 digits of serial No. \"26041\" and prior"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q03udecpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q03udecpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q04udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q04udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q06udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q06udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q10udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q10udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q13udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q13udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q20udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q20udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q26udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q26udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q50udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q50udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_q-q100udehcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_q-q100udehcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q03udvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q03udvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q04udvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q04udvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q06udvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q06udvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q13udvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q13udvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q26udvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q26udvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q06udpvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q06udpvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q13udpvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q13udpvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_q26udpvcpu:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_q26udpvcpu",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26061",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:l02cpu-p:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "l02cpu-p",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_l06cpu\\(-p\\):-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_l06cpu\\(-p\\)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishi:melsec_l26cpu\\(-p\\):-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishi",
"product": "melsec_l26cpu\\(-p\\)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_l02cpu-p:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_l02cpu-p",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_l06cpu-p:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_l06cpu-p",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_l26cpu-p:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_l26cpu-p",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:l26cpu-bt:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "l26cpu-bt",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mitsubishielectric:melsec_l26cpu-pbt:-:*:*:*:*:*:*:*"
],
"vendor": "mitsubishielectric",
"product": "melsec_l26cpu-pbt",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "xxxxx26041",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-03-15T01:15:57.997",
"references": [
{
"url": "https://jvn.jp/vu/JVNVU99690199/",
"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14",
"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
},
{
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf",
"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
},
{
"url": "https://jvn.jp/vu/JVNVU99690199/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet."
},
{
"lang": "es",
"value": "Vulnerabilidad de desbordamiento de enteros o envoltura en los módulos de CPU de las series MELSEC-Q y MELSEC-L de Mitsubishi Electric Corporation permite que un atacante remoto no autenticado ejecute código malicioso en un producto objetivo enviando un paquete especialmente manipulado."
}
],
"lastModified": "2026-06-17T06:54:19.857",
"sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
}