CVE-2023-49140 — HIGH (7.5)

Vulnerability Description

Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Jtekt	Gc-A22W-Cw Firmware	All versions
Jtekt	Gc-A22W-Cw	-
Jtekt	Gc-A24W-C\(W\) Firmware	All versions
Jtekt	Gc-A24W-C\(W\)	-
Jtekt	Gc-A26W-C\(W\) Firmware	All versions
Jtekt	Gc-A26W-C\(W\)	-
Jtekt	Gc-A24 Firmware	All versions
Jtekt	Gc-A24	-
Jtekt	Gc-A24-M Firmware	All versions
Jtekt	Gc-A24-M	-
Jtekt	Gc-A25 Firmware	All versions
Jtekt	Gc-A25	-
Jtekt	Gc-A26 Firmware	All versions
Jtekt	Gc-A26	-
Jtekt	Gc-A26-J2 Firmware	All versions
Jtekt	Gc-A26-J2	-
Jtekt	Gc-A27-C Firmware	All versions
Jtekt	Gc-A27-C	-
Jtekt	Gc-A28-C Firmware	All versions
Jtekt	Gc-A28-C	-

Related Weaknesses (CWE)

CWE-400

References

https://jvn.jp/en/jp/JVN34145838/Third Party Advisory
https://www.electronics.jtekt.co.jp/en/topics/202312116562/Vendor Advisory
https://jvn.jp/en/jp/JVN34145838/Third Party Advisory
https://www.electronics.jtekt.co.jp/en/topics/202312116562/Vendor Advisory

FAQ

What is CVE-2023-49140?

CVE-2023-49140 is a vulnerability with a CVSS score of 7.5 (HIGH). Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service...

How severe is CVE-2023-49140?

CVE-2023-49140 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-49140?

Check the references section above for vendor advisories and patch information. Affected products include: Jtekt Gc-A22W-Cw Firmware, Jtekt Gc-A22W-Cw, Jtekt Gc-A24W-C\(W\) Firmware, Jtekt Gc-A24W-C\(W\), Jtekt Gc-A26W-C\(W\) Firmware.