CVE-2023-7033

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 27, 2024
Updated: Feb 28, 2024
CWE ID 410

Summary

CVE-2023-7033 designates a Denial of Service vulnerability affecting the Ethernet function of Mitsubishi Electric Corporation's MELSEC iQ-F Series CPU modules. An attacker, located remotely, can exploit this Insufficient Resource Pool weakness by launching a TCP SYN Flood attack. This assault causes a brief but significant disruption in Ethernet communication for the targeted product line.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share