ID

VAR-202410-3650


TITLE

Mitsubishi Electric Mitsubishi PLC FX5UJ has a buffer overflow vulnerability

Trust: 0.6

sources: CNVD: CNVD-2024-45604

DESCRIPTION

Mitsubishi PLC FX5UJ is a micro programmable controller. Mitsubishi Electric Mitsubishi PLC FX5UJ has a buffer overflow vulnerability. Attackers can exploit this vulnerability to modify the length field of the transmission control program data packet, causing the workstation to be unable to read the control program content.

Trust: 0.6

sources: CNVD: CNVD-2024-45604

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2024-45604

AFFECTED PRODUCTS

vendor:mitsubishimodel:electric mitsubishi plc fx5ujscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2024-45604

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2024-45604
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2024-45604
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2024-45604

EXTERNAL IDS

db:CNVDid:CNVD-2024-45604

Trust: 0.6

sources: CNVD: CNVD-2024-45604

SOURCES

db:CNVDid:CNVD-2024-45604

LAST UPDATE DATE

2024-12-05T20:26:29.251000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2024-45604date:2024-11-21T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2024-45604date:2024-10-17T00:00:00