Skip to content
OpenAdvisories
Medium ICSA-24-291-03 1 CVE

Mitsubishi Electric CNC Series (Update D)

Published Oct 17, 2024 · Updated Jul 2, 2026 · Revision 9

Vendor: Mitsubishi Electric Product: CNC C80 Series C80 (BND-2036W000-**) Product: CNC M700V/M70V/E70 Series E70 (BND-1022W000-**) Product: CNC M700V/M70V/E70 Series M70V (BND-1018W000-**) Product: CNC M700V/M70V/E70 Series M720VS (BND-1012W000-**) Product: CNC M700V/M70V/E70 Series M720VW (BND-1015W000-**) Product: CNC M700V/M70V/E70 Series M730VS (BND-1012W000-**) Product: CNC M700V/M70V/E70 Series M730VW (BND-1015W000-**) Product: CNC M700V/M70V/E70 Series M750VS (BND-1012W002-**) Product: CNC M700V/M70V/E70 Series M750VW (BND-1015W002-**) Product: CNC M800/M80/E80 Series E80 (BND-2009W000-**) Product: CNC M800/M80/E80 Series M80 (BND-2007W000-**) Product: CNC M800/M80/E80 Series M800S (BND-2006W000-**) Product: CNC M800/M80/E80 Series M800W (BND-2005W000-**) Product: CNC M800/M80/E80 Series M80W (BND-2008W000-**) Product: CNC M800V/M80V Series M800VS (BND-2052W000-**) Product: CNC M800V/M80V Series M800VW (BND-2051W000-**) Product: CNC M800V/M80V Series M80V (BND-2053W000-**) Product: CNC M800V/M80V Series M80VW (BND-2054W000-**)

Summary

Successful exploitation of this vulnerability could allow a remote attacker to cause a denial of service (DoS) condition in Mitsubishi Electric CNC Series by sending specially crafted packets to TCP port 683, causing an emergency stop.

Vulnerabilities 1

Revision history

  1. #9

    CISA Republication - Update D - based on Mitsubishi Electric 2024-007 advisory

  2. #8

    Removed the affected products. Software tools

  3. #7

    CISA Republication - Update C - Update to product list and mitigations

  4. #6

    Listed the products that have been fixed. C80 Series

  5. #5

    CISA Republication - Update B - Updates to product list and mitigations.

  6. #4

    Listed the products that have been fixed. M700V/M70V/E70 Series

  7. #3

    CISA Republication - Update A - Updates to product list, mitigations, added CVSS v4 score.

  8. #2

    Added "Countermeasures for Products" and listed the products that have been fixed. M800V/M80V Series and M800/M80/E80 Series

  9. #1

    Initial Publication

References