CVE record · CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, M…

CVSS 5.3 MediumEPSS 0.0085 · 58th percentile

Published by the CVE Program (CNA: Mitsubishi) at 27 Feb 2024, 03:47 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R00CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R01CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R02CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R04CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R08CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R16CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R32CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R120CPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R04ENCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R08ENCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R16ENCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R32ENCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R120ENCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R08SFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R16SFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R32SFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R120SFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R08PCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R16PCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R32PCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R120PCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R08PSFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R16PSFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R32PSFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R series CPU module R120PSFCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-L series CPU module L04HCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-L series CPU module L08HCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-L series CPU module L16HCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-L series CPU module L32HCPU	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R Ethernet Interface Module RJ71EN71	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-T2	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-SX	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-EIP	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D	affected all versions Other versions: unaffected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T	affected all versions Other versions: unaffected

And 124 more products. The full list is on the CVE record.

Identifiers: CVE-2023-7033
CNA: Mitsubishi
Weakness (CWE): CWE-410
Tags: Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R00CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R01CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R02CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R04CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R08CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R16CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R32CPU
Mitsubishi Electric Corporation MELSEC iQ-R series CPU module R120CPU
CWE-410
Published: 27 Feb 2024
Updated: 16 Jan 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.3	Medium	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	CNA (Mitsubishi)

CISA KEV Not listed.
EPSS 0.0085, the 58th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 27 Feb 2024. New records show when each source confirmed them.

Sources

References from the CNA

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf vendor-advisory
jvn.jp/vu/JVNVU96145466/index.html government-resource
www.cisa.gov/news-events/ics-advisories/icsa-24-058-01 government-resource

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.