CVE-2023-7033
Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC…
- Published
- Updated
- Reserved
- Assigned by
- Mitsubishi
Description
Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link IE Field Network Bridge Module, CC-Link IE TSN - AnyWireASLINK Bridge Module, CC-Link IE TSN FPGA Module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Motion Module, MELSEC iQ-L Motion Module, MELSEC iQ-F FX5 Motion Module, MELSEC iQ-F Series CPU module, MELSEC iQ-F Series Ethernet module, MELSEC iQ-F Series Ethernet/IP module, MELSEC iQ-F Series OPC UA Module, MELSEC iQ-F Series CC-Link IE TSN master/local module, GOT2000 Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inverters, INVERTER CC-Link IE TSN Plug-in option, INVERTER CC-Link IE TSN Safety Plug-in option, INVERTER CC-Link IE TSN communication function built-in type, MR-J5 series AC Servos MELSERVO, MR-JET series AC Servos MELSERVO, MR-MD333G series AC Servos MELSERVO, MR-JE series AC Servos MELSERVO, MELSERVO-J4 AC Servos MELSERVO and Embedded Type Servo System Controller allow a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN Flood attack.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| MitsubishiCNA (assigner) | 3.1 | Medium5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
| NVDNVD · Deferred | 3.1 | Medium5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
- EPSS (exploitation in 30 days)
- 0.85% · top 42% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R00CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R01CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R02CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R04CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R08CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R16CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R32CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R120CPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R04ENCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R08ENCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R16ENCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R32ENCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R120ENCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R08SFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R16SFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R32SFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R120SFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R08PCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R16PCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R32PCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R120PCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R08PSFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R16PSFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R32PSFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R series CPU module R120PSFCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-L series CPU module L04HCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-L series CPU module L08HCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-L series CPU module L16HCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-L series CPU module L32HCPU
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Ethernet Interface Module RJ71EN71
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-T2
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-SX
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-EIP
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2B1-16TE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-32D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-32T
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-32TE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DT
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DTE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-16D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-16T
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN2S1-16TE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GNCF1-32D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GNCF1-32T
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GNCE3-32D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GNCE3-32DT
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN12A4-16D
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN12A4-16DE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN12A2-16T
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN12A2-16TE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DT
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DTE
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Analog-Digital Converter Module NZ2GN2S-60AD4
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Analog-Digital Converter Module NZ2GN2B-60AD4
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Digital-Analog Converter Module NZ2GN2S-60DA4
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Digital-Analog Converter Module NZ2GN2B-60DA4
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN - CC-Link IE Field Network Bridge Module NZ2GN-GFB
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN FPGA Module NZ2GN2S-D41P01
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN FPGA Module NZ2GN2S-D41D01
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN FPGA Module NZ2GN2S-D41PD02
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300
- affected all versions
Mitsubishi Electric Corporation · CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78G4
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78G8
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78G16
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78G32
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78G64
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78GHV
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-R Motion Module RD78GHW
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-L Motion Module LD78G4
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-L Motion Module LD78G16
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F FX5 Motion Module FX5-40SSC-G
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F FX5 Motion Module FX5-80SSC-G
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-32MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-64MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-80MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-32MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-64MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-80MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-32MT/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-64MT/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-80MT/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-32MR/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-64MR/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-80MR/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-32MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-64MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-80MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-32MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-64MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5U-80MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-32MT/D
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-64MT/D
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-96MT/D
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-32MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-64MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-96MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-32MT/DS-TS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-32MT/DSS-TS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UC-32MR/DS-TS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MT/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MT/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MT/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MR/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MR/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MR/DS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MT/DSS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MT/ES-A
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MT/ES-A
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MT/ES-A
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-24MR/ES-A
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-40MR/ES-A
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5UJ-60MR/ES-A
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-30MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-40MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-60MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-80MT/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-30MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-40MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-60MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-80MR/ES
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-30MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-40MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-60MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CPU module FX5S-80MT/ESS
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series Ethernet module FX5-ENET
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series Ethernet/IP module FX5-ENET/IP
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series OPC UA Module FX5-OPC
- affected all versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series CC-Link IE TSN master/local module FX5-CCLGN-MS
- affected all versions
Mitsubishi Electric Corporation · GOT2000 Series CC-Link IE TSN Communication Unit GT25-J71GN13-T2
- affected all versions
Mitsubishi Electric Corporation · FR-A800-E series inverters FR-A800-E series
- affected all versions
Mitsubishi Electric Corporation · FR-F800-E series inverters FR-F800-E series
- affected all versions
Mitsubishi Electric Corporation · FR-E800-E series inverters FR-E800-E series
- affected all versions
Mitsubishi Electric Corporation · INVERTER CC-Link IE TSN Plug-in option FR-A8NCG
- affected all versions
Mitsubishi Electric Corporation · INVERTER CC-Link IE TSN Safety Plug-in option FR-A8NCG-S
- affected all versions
Mitsubishi Electric Corporation · INVERTER CC-Link IE TSN communication function built-in type FR-A800-GN
- affected all versions
Mitsubishi Electric Corporation · MR-J5 series AC Servos MELSERVO MR-J5-A series
- affected all versions
Mitsubishi Electric Corporation · MR-J5 series AC Servos MELSERVO MR-J5-G series
- affected all versions
Mitsubishi Electric Corporation · MR-J5 series AC Servos MELSERVO MR-J5W-G series
- affected all versions
Mitsubishi Electric Corporation · MR-J5 series AC Servos MELSERVO MR-J5D-G series
- affected all versions
Mitsubishi Electric Corporation · MR-JET series AC Servos MELSERVO MR-JET-G series
- affected all versions
Mitsubishi Electric Corporation · MR-MD333G series AC Servos MELSERVO MR-MD333G series
- affected all versions
Mitsubishi Electric Corporation · MR-JE series AC Servos MELSERVO MR-JE-C series
- affected all versions
Mitsubishi Electric Corporation · MELSERVO-J4 AC Servos MELSERVO MR-J4-GF series
- affected versions A4 or later
Mitsubishi Electric Corporation · Embedded Type Servo System Controller MR-EM441G series
- affected all versions
References (3)
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf (opens in a new tab)vendor-advisoryx_transferred
- https://jvn.jp/vu/JVNVU96145466/index.html (opens in a new tab)government-resourcex_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01 (opens in a new tab)government-resourcex_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-7033)Record last updated .