Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3pq4-wgqv-gq3h

Опубликовано: 05 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.8

Описание

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.

EPSS

Процентиль: 14%
0.00046
Низкий

8.8 High

CVSS4

Дефекты

CWE-1284

Связанные уязвимости

nvd
4 дня назад

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.

EPSS

Процентиль: 14%
0.00046
Низкий

8.8 High

CVSS4

Дефекты

CWE-1284