Skip to content
Fencer Intel
medium 5.9

CVE-2024-7316 json

Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

published 2y ago modified 4mo ago also EUVD-2024-48257

cvss
5.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 47%
public exploits
0
none known

Summary

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop.

Is CVE-2024-7316 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-291-03 updated cvss 5.9

Mitsubishi Electric CNC Series (Update D)

  • Mitsubishi Electric CNC C80 Series C80 (BND-2036W000-**) <=BJ Mitsubishi Electric CNC M700V/M70V/E70 Series E70 (BND-1022W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M70V (BND-1018W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M720VS (BND-1012W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M720VW (BND-1015W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M730VS (BND-1012W000-**) <=LG
    +12 more products
    Mitsubishi Electric CNC M700V/M70V/E70 Series M730VW (BND-1015W000-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M750VS (BND-1012W002-**) <=LG Mitsubishi Electric CNC M700V/M70V/E70 Series M750VW (BND-1015W002-**) <=LG Mitsubishi Electric CNC M800/M80/E80 Series E80 (BND-2009W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M80 (BND-2007W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M80W (BND-2008W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M800S (BND-2006W000-**) <=FH Mitsubishi Electric CNC M800/M80/E80 Series M800W (BND-2005W000-**) <=FH Mitsubishi Electric CNC M800V/M80V Series M80V (BND-2053W000-**) <=B1 Mitsubishi Electric CNC M800V/M80V Series M80VW (BND-2054W000-**) <=B1 Mitsubishi Electric CNC M800V/M80V Series M800VS (BND-2052W000-**) <=B1 Mitsubishi Electric CNC M800V/M80V Series M800VW (BND-2051W000-**) <=B1
    affected: vendor fix, mitigation mitsubishielectric.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2y ago

Exploit prediction

0.56% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80V Series M80V
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80V Series M80VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800 Series M800W
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M800 Series M800S
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80 Series M80
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M80 Series M80W
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC E80 Series E80
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC C80 Series C80
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M720VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M730VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M750VW
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M720VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M730VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M700V Series M750VS
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC M70V Series M70V
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC E70 Series E70
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC Software Tools NC Trainer2
  • Mitsubishi Electric Corporation Mitsubishi Electric CNC Software Tools NC Trainer2 plus

Classification

Weakness
  • CWE-1284 Improper Validation of Specified Quantity in Input

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.