What’s Vulnerable › Vulnerabilities
CVE-2023-7033
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-02-27 · updated 2026-06-17
- Weakness: CWE-410
Description
Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link IE Field Network Bridge Module, CC-Link IE TSN - AnyWireASLINK Bridge Module, CC-Link IE TSN FPGA Module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Motion Module, MELSEC iQ-L Motion Module, MELSEC iQ-F FX5 Motion Module, MELSEC iQ-F Series CPU module, MELSEC iQ-F Series Ethernet module, MELSEC iQ-F Series Ethernet/IP module, MELSEC iQ-F Series OPC UA Module, MELSEC iQ-F Series CC-Link IE TSN master/local module, GOT2000 Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inverters, INVERTER CC-Link IE TSN Plug-in option, INVERTER CC-Link IE TSN Safety Plug-in option, INVERTER CC-Link IE TSN communication function built-in type, MR-J5 series AC Servos MELSERVO, MR-JET series AC Servos MELSERVO, MR-MD333G series AC Servos MELSERVO, MR-JE series AC Servos MELSERVO, MELSERVO-J4 AC Servos MELSERVO and Embedded Type Servo System Controller allow a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN Flood attack.
Affected products
- Mitsubishi Electric Corporation CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN - CC-Link IE Field Network Bridge Module NZ2GN-GFB: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter Module NZ2GN2B-60AD4: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter Module NZ2GN2S-60AD4: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter Module NZ2GN2B-60DA4: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter Module NZ2GN2S-60DA4: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN FPGA Module NZ2GN2S-D41D01: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN FPGA Module NZ2GN2S-D41P01: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN FPGA Module NZ2GN2S-D41PD02: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A2-16T: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A2-16TE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A4-16D: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A4-16DE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DT: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DTE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-16TE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-16D: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-16T: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-16TE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32D: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DT: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DTE: all versions
- Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O Module NZ2GN2S1-32T: all versions
References
- https://jvn.jp/vu/JVNVU96145466/index.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf
- https://jvn.jp/vu/JVNVU96145466/index.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf
Get alerted when CVE-2023-7033 or the next vulnerability affects your stack