CVE-2023-1424

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.

• CWE-120
• CWE-120

• https://jvn.jp/vu/JVNVU94650413Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdfPatch, Vendor Advisory
• https://jvn.jp/vu/JVNVU94650413Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-03Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdfPatch, Vendor Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1727

Published

May 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1416A vulnerability classified as critical has been found in Sim…9.8
• CVE-2023-1417An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1418A vulnerability classified as problematic was found in Sourc…6.1
• CVE-2023-1419A script injection vulnerability was found in the Debezium d…5.9
• CVE-2023-1420The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Se…6.1
• CVE-2023-1421A reflected cross-site scripting vulnerability in the OAuth …6.1
• CVE-2023-1425The WordPress CRM, Email & Marketing Automation for WordPres…7.2
• CVE-2023-1426The WP Tiles WordPress plugin through 1.1.2 does not ensure …6.5
• CVE-2023-1427- The Photo Gallery by 10Web WordPress plugin before 1.8.15 …4.9
• CVE-2023-1428There exists an vulnerability causing an abort() to be calle…7.5
• CVE-2023-1429Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-1430The FluentCRM - Marketing Automation For WordPress plugin f…6.5