Executive brief
Mitsubishi Electric's CNC (Computer Numerical Control) machines are industrial controllers used to automate manufacturing equipment. An attacker can send malicious network packets to TCP port 683 that trigger an out-of-bounds memory read, causing the device to crash and stop functioning (denial of service). Recovery requires a manual system reset, potentially halting production operations.
Technical details
This vulnerability is an out-of-bounds read (CWE-1285) caused by improper validation of input indices, positions, or offsets in the CNC network protocol handler. The vulnerability is remotely exploitable without authentication by sending specially crafted packets to TCP port 683. A successful exploit causes a denial-of-service condition that forces the affected CNC system into an emergency stop state and requires manual system reset for recovery. Patch availability varies by product line; some versions have fixes available while others have only mitigation strategies provided by Mitsubishi Electric.
Affected products
- Mitsubishi Electric CNC M800VW BND-2051W000-** BB edition and earlier
- Mitsubishi Electric CNC M800VS BND-2052W000-** BB edition and earlier
- Mitsubishi Electric CNC M80V BND-2053W000-** BB edition and earlier
- Mitsubishi Electric CNC M80VW BND-2054W000-** BB edition and earlier
- Mitsubishi Electric CNC M800W BND-2005W000-** FM edition and earlier
- Mitsubishi Electric CNC M800S BND-2006W000-** FM edition and earlier
- Mitsubishi Electric CNC M80 BND-2007W000-** FM edition and earlier
- Mitsubishi Electric CNC M80W BND-2008W000-** FM edition and earlier
- Mitsubishi Electric CNC E80 BND-2009W000-** FM edition and earlier
- Mitsubishi Electric CNC C80 BND-2036W000-** all versions
- Mitsubishi Electric CNC M750VW BND-1015W002-** LJ edition and earlier
- Mitsubishi Electric CNC M730VW BND-1015W000-** LJ edition and earlier
- Mitsubishi Electric CNC M720VW BND-1015W000-** LJ edition and earlier
- Mitsubishi Electric CNC M750VS BND-1012W002-** LJ edition and earlier
- Mitsubishi Electric CNC M730VS BND-1012W000-** LJ edition and earlier
- Mitsubishi Electric CNC M720VS BND-1012W000-** LJ edition and earlier
- Mitsubishi Electric CNC M70V BND-1018W000-** LJ edition and earlier
- Mitsubishi Electric CNC E70 BND-1022W000-** LJ edition and earlier
Timeline
- 2026-03-10: disclosed