{"id":"CVE-2024-7316","aliases":["EUVD-2024-48257","GHSA-jgg2-5cv9-85wh"],"status":"published","title":"Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00563,"percentile":0.47256,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1284"],"published":"2024-10-17T21:52:22Z","modified":"2026-06-17T08:19:50Z","products":[{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc c80 series c80"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc e70 series e70"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc e80 series e80"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m700v series m720vs"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m700v series m720vw"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m700v series m730vs"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m700v series m730vw"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m700v series m750vs"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m700v series m750vw"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m70v series m70v"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m80 series m80"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m80 series m80w"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m800 series m800s"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m800 series m800w"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m800v series m800vs"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m800v series m800vw"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m80v series m80v"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc m80v series m80vw"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc software tools nc trainer2"},{"vendor":"mitsubishi electric corporation","product":"mitsubishi electric cnc software tools nc trainer2 plus"}],"references":[{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-007_en.pdf","tags":["vendor-advisory"]},{"url":"https://jvn.jp/vu/JVNVU92054409/index.html","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7316"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-03"},{"url":"https://github.com/advisories/GHSA-jgg2-5cv9-85wh"}],"sources":{"cve":[{"id":"CVE-2024-7316","title":"Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.","status":"published","published":"2024-10-17T21:52:22.864Z","modified":"2025-12-22T23:25:25.731Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-48257","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.","status":"published","published":"2024-10-17T21:52:22Z","modified":"2025-12-22T23:25:25Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:01.709544Z"}],"ghsa":[{"id":"GHSA-jgg2-5cv9-85wh","title":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC...","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.","status":"published","published":"2024-10-18T00:31:16Z","modified":"2024-10-18T00:31:22Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:58:32.565259Z"}],"nvd":[{"id":"CVE-2024-7316","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.","status":"published","published":"2024-10-17T22:15:03.313Z","modified":"2026-06-17T08:19:50.457Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:10:32.45889Z"}]}}