CVE-2024-1917

Summary

CVE-2024-1917 is a newly disclosed vulnerability affecting Mitsubishi Electric Corporation's MELSEC-Q Series and MELSEC-L Series CPU modules. This issue involves an integer overflow or wraparound, which can be exploited by an unauthenticated attacker sending a maliciously crafted packet. Successful exploitation grants the attacker the ability to execute arbitrary code on the target product. This vulnerability poses a significant risk to industrial control systems and requires immediate attention and patching from affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.