CVE-2024-1915

Summary

CVE-2024-1915 is a newly identified vulnerability affecting Mitsubishi Electric Corporation's MELSEC-Q Series and MELSEC-L Series CPU modules. This issue involves an Incorrect Pointer Scaling error, which allows a remote, unauthenticated attacker to execute arbitrary code on targeted products. The vulnerability can be exploited by sending a specially crafted packet to the affected device. Successful exploitation could result in significant harm, including unauthorized system access or alteration of crucial data. Users are strongly advised to update their devices with the latest security patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.