{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2023-7033 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2023-7033 yet. Limit exposure of the affected software until one is available.","what":"CVE-2023-7033 is a medium-severity denial of service vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL, published on 27 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2023-7033 and fix it if it is affected.\n\nWhat it is: CVE-2023-7033 is a medium-severity denial of service vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL, published on 27 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2023-7033 in the wild and no public exploit code.\n\nAffected product: Mitsubishi Electric Corporation CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-7033/ (Markdown: https://insights.sbomify.com/CVE-2023-7033/index.md)","id":"CVE-2023-7033","markdown":"https://insights.sbomify.com/CVE-2023-7033/index.md","name":"CVE-2023-7033","record":{"aliases":["GHSA-28p7-rxh6-3h6x"],"analysis":{"component_type":"ics_ot","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Mitsubishi PLC and modules","requires_auth":"none","summary":"Remote attackers can cause temporary Ethernet communication denial of service in Mitsubishi industrial devices via TCP SYN Flood attacks.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Mitsubishi","cpe":[],"cvss":{"score":5.3,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"cwes":[{"id":"CWE-410","name":"Insufficient Resource Pool"}],"description":"Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link IE Field Network Bridge Module, CC-Link IE TSN - AnyWireASLINK Bridge Module, CC-Link IE TSN FPGA Module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Motion Module, MELSEC iQ-L Motion Module, MELSEC iQ-F FX5 Motion Module, MELSEC iQ-F Series CPU module, MELSEC iQ-F Series Ethernet module, MELSEC iQ-F Series Ethernet/IP module, MELSEC iQ-F Series OPC UA Module, MELSEC iQ-F Series CC-Link IE TSN master/local module, GOT2000 Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inverters, INVERTER CC-Link IE TSN Plug-in option, INVERTER CC-Link IE TSN Safety Plug-in option, INVERTER CC-Link IE TSN communication function built-in type, MR-J5 series AC Servos MELSERVO, MR-JET series AC Servos MELSERVO, MR-MD333G series AC Servos MELSERVO, MR-JE series AC Servos MELSERVO, MELSERVO-J4 AC Servos MELSERVO and Embedded Type Servo System Controller allow a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN Flood attack.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Denial of service in CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL","id":"CVE-2023-7033","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"denial_of_service","year":"2023"},"n_packages":0,"n_references":3,"next":{"headline":"automad Setting post.php cross site scripting","id":"CVE-2023-7035"},"packages":[],"prev":{"headline":"Deserialization in Easergy Studio","id":"CVE-2023-7032"},"products":["CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL","CC-Link IE TSN - CC-Link IE Field Network Bridge Module NZ2GN-GFB","CC-Link IE TSN Analog-Digital Converter Module NZ2GN2B-60AD4","CC-Link IE TSN Analog-Digital Converter Module NZ2GN2S-60AD4","CC-Link IE TSN Digital-Analog Converter Module NZ2GN2B-60DA4","CC-Link IE TSN Digital-Analog Converter Module NZ2GN2S-60DA4","CC-Link IE TSN FPGA Module NZ2GN2S-D41D01","CC-Link IE TSN FPGA Module NZ2GN2S-D41P01","CC-Link IE TSN FPGA Module NZ2GN2S-D41PD02","CC-Link IE TSN Remote I/O Module NZ2GN12A2-16T","CC-Link IE TSN Remote I/O Module NZ2GN12A2-16TE","CC-Link IE TSN Remote I/O Module NZ2GN12A4-16D","CC-Link IE TSN Remote I/O Module NZ2GN12A4-16DE","CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DT","CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DTE","CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D","CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T","CC-Link IE TSN Remote I/O Module NZ2GN2B1-16TE","CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D","CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT","CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE","CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T","CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE","CC-Link IE TSN Remote I/O Module NZ2GN2S1-16D","CC-Link IE TSN Remote I/O Module NZ2GN2S1-16T","CC-Link IE TSN Remote I/O Module NZ2GN2S1-16TE","CC-Link IE TSN Remote I/O Module NZ2GN2S1-32D","CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DT","CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DTE","CC-Link IE TSN Remote I/O Module NZ2GN2S1-32T","CC-Link IE TSN Remote I/O Module NZ2GN2S1-32TE","CC-Link IE TSN Remote I/O Module NZ2GNCE3-32D","CC-Link IE TSN Remote I/O Module NZ2GNCE3-32DT","CC-Link IE TSN Remote I/O Module NZ2GNCF1-32D","CC-Link IE TSN Remote I/O Module NZ2GNCF1-32T","CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300","CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60","Embedded Type Servo System Controller MR-EM441G series","FR-A800-E series inverters FR-A800-E series","FR-E800-E series inverters FR-E800-E series","FR-F800-E series inverters FR-F800-E series","GOT2000 Series CC-Link IE TSN Communication Unit GT25-J71GN13-T2","INVERTER CC-Link IE TSN Plug-in option FR-A8NCG","INVERTER CC-Link IE TSN Safety Plug-in option FR-A8NCG-S","INVERTER CC-Link IE TSN communication function built-in type FR-A800-GN","MELSEC iQ-F FX5 Motion Module FX5-40SSC-G","MELSEC iQ-F FX5 Motion Module FX5-80SSC-G","MELSEC iQ-F Series CC-Link IE TSN master/local module FX5-CCLGN-MS","MELSEC iQ-F Series CPU module FX5S-30MR/ES","MELSEC iQ-F Series CPU module FX5S-30MT/ES","MELSEC iQ-F Series CPU module FX5S-30MT/ESS","MELSEC iQ-F Series CPU module FX5S-40MR/ES","MELSEC iQ-F Series CPU module FX5S-40MT/ES","MELSEC iQ-F Series CPU module FX5S-40MT/ESS","MELSEC iQ-F Series CPU module FX5S-60MR/ES","MELSEC iQ-F Series CPU module FX5S-60MT/ES","MELSEC iQ-F Series CPU module FX5S-60MT/ESS","MELSEC iQ-F Series CPU module FX5S-80MR/ES","MELSEC iQ-F Series CPU module FX5S-80MT/ES","MELSEC iQ-F Series CPU module FX5S-80MT/ESS","MELSEC iQ-F Series CPU module FX5U-32MR/DS","MELSEC iQ-F Series CPU module FX5U-32MR/ES","MELSEC iQ-F Series CPU module FX5U-32MT/DS","MELSEC iQ-F Series CPU module FX5U-32MT/DSS","MELSEC iQ-F Series CPU module FX5U-32MT/ES","MELSEC iQ-F Series CPU module FX5U-32MT/ESS","MELSEC iQ-F Series CPU module FX5U-64MR/DS","MELSEC iQ-F Series CPU module FX5U-64MR/ES","MELSEC iQ-F Series CPU module FX5U-64MT/DS","MELSEC iQ-F Series CPU module FX5U-64MT/DSS","MELSEC iQ-F Series CPU module FX5U-64MT/ES","MELSEC iQ-F Series CPU module FX5U-64MT/ESS","MELSEC iQ-F Series CPU module FX5U-80MR/DS","MELSEC iQ-F Series CPU module FX5U-80MR/ES","MELSEC iQ-F Series CPU module FX5U-80MT/DS","MELSEC iQ-F Series CPU module FX5U-80MT/DSS","MELSEC iQ-F Series CPU module FX5U-80MT/ES","MELSEC iQ-F Series CPU module FX5U-80MT/ESS","MELSEC iQ-F Series CPU module FX5UC-32MR/DS-TS","MELSEC iQ-F Series CPU module FX5UC-32MT/D","MELSEC iQ-F Series CPU module FX5UC-32MT/DS-TS","MELSEC iQ-F Series CPU module FX5UC-32MT/DSS","MELSEC iQ-F Series CPU module FX5UC-32MT/DSS-TS","MELSEC iQ-F Series CPU module FX5UC-64MT/D","MELSEC iQ-F Series CPU module FX5UC-64MT/DSS","MELSEC iQ-F Series CPU module FX5UC-96MT/D","MELSEC iQ-F Series CPU module FX5UC-96MT/DSS","MELSEC iQ-F Series CPU module FX5UJ-24MR/DS","MELSEC iQ-F Series CPU module FX5UJ-24MR/ES","MELSEC iQ-F Series CPU module FX5UJ-24MR/ES-A","MELSEC iQ-F Series CPU module FX5UJ-24MT/DS","MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS","MELSEC iQ-F Series CPU module FX5UJ-24MT/ES","MELSEC iQ-F Series CPU module FX5UJ-24MT/ES-A","MELSEC iQ-F Series CPU module FX5UJ-24MT/ESS","MELSEC iQ-F Series CPU module FX5UJ-40MR/DS","MELSEC iQ-F Series CPU module FX5UJ-40MR/ES","MELSEC iQ-F Series CPU module FX5UJ-40MR/ES-A","MELSEC iQ-F Series CPU module FX5UJ-40MT/DS","MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS","MELSEC iQ-F Series CPU module FX5UJ-40MT/ES","MELSEC iQ-F Series CPU module FX5UJ-40MT/ES-A","MELSEC iQ-F Series CPU module FX5UJ-40MT/ESS","MELSEC iQ-F Series CPU module FX5UJ-60MR/DS","MELSEC iQ-F Series CPU module FX5UJ-60MR/ES","MELSEC iQ-F Series CPU module FX5UJ-60MR/ES-A","MELSEC iQ-F Series CPU module FX5UJ-60MT/DS","MELSEC iQ-F Series CPU module FX5UJ-60MT/DSS","MELSEC iQ-F Series CPU module FX5UJ-60MT/ES","MELSEC iQ-F Series CPU module FX5UJ-60MT/ES-A","MELSEC iQ-F Series CPU module FX5UJ-60MT/ESS","MELSEC iQ-F Series Ethernet module FX5-ENET","MELSEC iQ-F Series Ethernet/IP module FX5-ENET/IP","MELSEC iQ-F Series OPC UA Module FX5-OPC","MELSEC iQ-L Motion Module LD78G16","MELSEC iQ-L Motion Module LD78G4","MELSEC iQ-L series CPU module L04HCPU","MELSEC iQ-L series CPU module L08HCPU","MELSEC iQ-L series CPU module L16HCPU","MELSEC iQ-L series CPU module L32HCPU","MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-EIP","MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-SX","MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-T2","MELSEC iQ-R Ethernet Interface Module RJ71EN71","MELSEC iQ-R Motion Module RD78G16","MELSEC iQ-R Motion Module RD78G32","MELSEC iQ-R Motion Module RD78G4","MELSEC iQ-R Motion Module RD78G64","MELSEC iQ-R Motion Module RD78G8","MELSEC iQ-R Motion Module RD78GHV","MELSEC iQ-R Motion Module RD78GHW","MELSEC iQ-R series CPU module R00CPU","MELSEC iQ-R series CPU module R01CPU","MELSEC iQ-R series CPU module R02CPU","MELSEC iQ-R series CPU module R04CPU","MELSEC iQ-R series CPU module R04ENCPU","MELSEC iQ-R series CPU module R08CPU","MELSEC iQ-R series CPU module R08ENCPU","MELSEC iQ-R series CPU module R08PCPU","MELSEC iQ-R series CPU module R08PSFCPU","MELSEC iQ-R series CPU module R08SFCPU","MELSEC iQ-R series CPU module R120CPU","MELSEC iQ-R series CPU module R120ENCPU","MELSEC iQ-R series CPU module R120PCPU","MELSEC iQ-R series CPU module R120PSFCPU","MELSEC iQ-R series CPU module R120SFCPU","MELSEC iQ-R series CPU module R16CPU","MELSEC iQ-R series CPU module R16ENCPU","MELSEC iQ-R series CPU module R16PCPU","MELSEC iQ-R series CPU module R16PSFCPU","MELSEC iQ-R series CPU module R16SFCPU","MELSEC iQ-R series CPU module R32CPU","MELSEC iQ-R series CPU module R32ENCPU","MELSEC iQ-R series CPU module R32PCPU","MELSEC iQ-R series CPU module R32PSFCPU","MELSEC iQ-R series CPU module R32SFCPU","MELSERVO-J4 AC Servos MELSERVO MR-J4-GF series","MR-J5 series AC Servos MELSERVO MR-J5-A series","MR-J5 series AC Servos MELSERVO MR-J5-G series","MR-J5 series AC Servos MELSERVO MR-J5D-G series","MR-J5 series AC Servos MELSERVO MR-J5W-G series","MR-JE series AC Servos MELSERVO MR-JE-C series","MR-JET series AC Servos MELSERVO MR-JET-G series","MR-MD333G series AC Servos MELSERVO MR-MD333G series"],"published":"2024-02-27","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2025-01-16","vendors":["Mitsubishi Electric Corporation"]},"summary":"Remote attackers can cause temporary Ethernet communication denial of service in Mitsubishi industrial devices via TCP SYN Flood attacks.","url":"https://insights.sbomify.com/CVE-2023-7033/"}