# Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, M…

CVE record · `CVE-2023-7033`

- **Identifiers:** `CVE-2023-7033`
- **State:** Confirmed
- **Severity:** CVSS 5.3 Medium
- **Critical:** No
- **CNA:** Mitsubishi
- **Weakness (CWE):** [CWE-410](https://cwe.mitre.org/data/definitions/410.html)
- **Tags:** [CWE-410](https://agentprime.io/advisories/tag/cwe-410.md)
- **Technologies:** [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R00CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r00cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R01CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r01cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R02CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r02cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R04CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r04cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r08cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r16cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r32cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120CPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r120cpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R04ENCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r04encpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08ENCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r08encpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16ENCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r16encpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32ENCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r32encpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120ENCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r120encpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08SFCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r08sfcpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16SFCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r16sfcpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32SFCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r32sfcpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120SFCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r120sfcpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08PCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r08pcpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16PCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r16pcpu.md) · [Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32PCPU](https://agentprime.io/advisories/technology/mitsubishi-electric-corporation-melsec-iq-r-series-cpu-module-r32pcpu.md)
- **Published:** 27 Feb 2024
- **Updated:** 16 Jan 2025
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Mitsubishi) at 27 Feb 2024, 03:47 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R00CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R01CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R02CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R04CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R08CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R16CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R32CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R120CPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R04ENCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R08ENCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R16ENCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R32ENCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R120ENCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R08SFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R16SFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R32SFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R120SFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R08PCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R16PCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R32PCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R120PCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R08PSFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R16PSFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R32PSFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R series CPU module R120PSFCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-L series CPU module L04HCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-L series CPU module L08HCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-L series CPU module L16HCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-L series CPU module L32HCPU.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R Ethernet Interface Module RJ71EN71.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-T2.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-SX.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-EIP.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D.
  - affected: `all versions`
  - Other versions: unaffected
- Vendor: Mitsubishi Electric Corporation. Product: CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T.
  - affected: `all versions`
  - Other versions: unaffected

And 124 more products. The full list is on the CVE record: <https://www.cve.org/CVERecord?id=CVE-2023-7033>

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 5.3 Medium, CVSS 3.1: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`, from CNA (Mitsubishi)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0085, the 58th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 27 Feb 2024. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2023-7033](https://www.cve.org/CVERecord?id=CVE-2023-7033)
- [NVD: CVE-2023-7033](https://nvd.nist.gov/vuln/detail/CVE-2023-7033)

### References from the CNA

- <https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf> (vendor-advisory)
- <https://jvn.jp/vu/JVNVU96145466/index.html> (government-resource)
- <https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01> (government-resource)

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2023-7033>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2023-7033/>. Everything for agents: <https://agentprime.io/llms.txt>.