{ "id": "CVE-2024-7316", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "published": "2024-10-17T22:15:03.313", "lastModified": "2024-10-18T12:52:33.507", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop." } ], "metrics": { "cvssMetricV31": [ { "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM" }, "exploitabilityScore": 2.2, "impactScore": 3.6 } ] }, "weaknesses": [ { "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-1284" } ] } ], "references": [ { "url": "https://jvn.jp/vu/JVNVU92054409/index.html", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-03", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp" }, { "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-007_en.pdf", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp" } ] }