CVE-2024-7316

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1284

Affected software

VendorProductVersions
Mitsubishi Electric CorporationMitsubishi Electric CNC M800V Series M800VWSystem Number BND-2051W000 versions B1 and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M800V Series M800VSSystem Number BND-2052W000 versions B1 and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M80V Series M80VSystem Number BND-2053W000 versions B1 and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M80V Series M80VWSystem Number BND-2054W000 versions B1 and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M800 Series M800WSystem Number BND-2005W000 versions FH and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M800 Series M800SSystem Number BND-2006W000 versions FH and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M80 Series M80System Number BND-2007W000 versions FH and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M80 Series M80WSystem Number BND-2008W000 versions FH and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC E80 Series E80System Number BND-2009W000 versions FH and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC C80 Series C80System Number BND-2036W000 versions BJ and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M700V Series M720VWSystem Number BND-1015W000 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M700V Series M730VWSystem Number BND-1015W000 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M700V Series M750VWSystem Number BND-1015W002 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M700V Series M720VSSystem Number BND-1012W000 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M700V Series M730VSSystem Number BND-1012W000 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M700V Series M750VSSystem Number BND-1012W002 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC M70V Series M70VSystem Number BND-1018W000 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC E70 Series E70System Number BND-1022W000 versions LG and prior
Mitsubishi Electric CorporationMitsubishi Electric CNC Software Tools NC Trainer2System Number BND-1802W000 all versions
Mitsubishi Electric CorporationMitsubishi Electric CNC Software Tools NC Trainer2 plusSystem Number BND-1803W000 all versions

References

Timeline

Published
Oct 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-73175.4The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vulnerable to Stored CrCVE-2024-73184.8A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period is set to 30 seconds CVE-2024-73195.0An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stackCVE-2024-73209.8A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part CVE-2024-73216.1A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknCVE-2024-73225.8A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change CVE-2024-73236.5Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A rCVE-2024-73247.8A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an CVE-2024-73257.8A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionalCVE-2024-73267.8A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3. This affects an unknown part in the librarCVE-2024-73278.8A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmCVE-2024-73285.3A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file
CVE-2024-7316: Medium severity, CVSS 5.9 | Vulnix