CVE-2023-3346: Mitsubishielectric c80 Firmware

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.

Affected products

• Mitsubishielectric c80 Firmware: affected versions not specified
• Mitsubishielectric e70 Firmware: affected versions not specified
• Mitsubishielectric e80 Firmware: affected versions not specified
• Mitsubishielectric m70v Firmware: affected versions not specified
• Mitsubishielectric m720vs 15-Type Firmware: affected versions not specified
• Mitsubishielectric m720vs Firmware: affected versions not specified
• Mitsubishielectric m720vw Firmware: affected versions not specified
• Mitsubishielectric m730vs 15-Type Firmware: affected versions not specified
• Mitsubishielectric m730vs Firmware: affected versions not specified
• Mitsubishielectric m730vw Firmware: affected versions not specified
• Mitsubishielectric m750vs 15-Type Firmware: affected versions not specified
• Mitsubishielectric m750vs Firmware: affected versions not specified
• Mitsubishielectric m750vw Firmware: affected versions not specified
• Mitsubishielectric m800s Firmware: affected versions not specified
• Mitsubishielectric m800vs Firmware: affected versions not specified
• Mitsubishielectric m800vw Firmware: affected versions not specified
• Mitsubishielectric m800w Firmware: affected versions not specified
• Mitsubishielectric m80 Firmware: affected versions not specified
• Mitsubishielectric m80v Firmware: affected versions not specified
• Mitsubishielectric m80vw Firmware: affected versions not specified
• Mitsubishielectric m80w Firmware: affected versions not specified

Published 2023-08-03. Last modified 2026-06-17.