CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in Ethernet communication by sending a large number of specially crafted packets to any UDP port when GC-ENET-COM is configured as a Modbus TCP Server. The communication resumes only when the power of the main unit is turned off and on or when the GC-ENET-COM is hot-swapped from the main unit.

• CWE-364
• CWE-362

• https://mitsubishielectric.in/fa/cnc-pdf/DoS_in_Ethernet_Communication_Extension_Unit_GC_ENET_COM_of_GOC35_Series.pdfVendor Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15Third Party Advisory, US Government Resource
• https://mitsubishielectric.in/fa/cnc-pdf/DoS_in_Ethernet_Communication_Extension_Unit_GC_ENET_COM_of_GOC35_Series.pdfVendor Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15Third Party Advisory, US Government Resource

Published

Apr 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1277A vulnerability, which was classified as critical, was found…7.8
• CVE-2023-1278A vulnerability, which was classified as problematic, has be…6.1
• CVE-2023-1279An issue has been discovered in GitLab affecting all version…6.1
• CVE-2023-1281Use After Free vulnerability in Linux kernel traffic control…7.8
• CVE-2023-1282The Drag and Drop Multiple File Upload PRO - Contact Form 7 …6.1
• CVE-2023-1283Code Injection in GitHub repository builderio/qwik prior to …9.8
• CVE-2023-1286Cross-site Scripting (XSS) - Stored in GitHub repository pim…4.8
• CVE-2023-1287 An XSL template vulnerability in ENOVIA Liv…9.8
• CVE-2023-1288 An XML External Entity injection (XXE) vulnerability…7.5
• CVE-2023-1289A vulnerability was discovered in ImageMagick where a specia…5.5
• CVE-2023-1290A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-1291A vulnerability, which was classified as critical, was found…9.8