What’s Vulnerable › Vulnerabilities

CVE-2023-49140

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-12 · updated 2026-06-17
• Weakness: CWE-400

Description

Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

Affected products

• Jtekt Gc-A22W-Cw Firmware: all versions
• Jtekt Gc-A24-M Firmware: all versions
• Jtekt Gc-A24 Firmware: all versions
• Jtekt Gc-A24W-C(W) Firmware: all versions
• Jtekt Gc-A25 Firmware: all versions
• Jtekt Gc-A26-J2 Firmware: all versions
• Jtekt Gc-A26 Firmware: all versions
• Jtekt Gc-A26W-C(W) Firmware: all versions
• Jtekt Gc-A27-C Firmware: all versions
• Jtekt Gc-A28-C Firmware: all versions

References

• https://jvn.jp/en/jp/JVN34145838/
• https://www.electronics.jtekt.co.jp/en/topics/202312116562/
• https://jvn.jp/en/jp/JVN34145838/
• https://www.electronics.jtekt.co.jp/en/topics/202312116562/

Get alerted when CVE-2023-49140 or the next vulnerability affects your stack