Description (CNA)
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mitsubishi Electric Corporation / GX Works3 | affected all versions |
| Mitsubishi Electric Corporation / MELSOFT iQ AppPortal | affected all versions |
| Mitsubishi Electric Corporation / MELSOFT Navigator | affected all versions |
| Mitsubishi Electric Corporation / Motion Control Setting | affected all versions |
CWE
CWE-73
References
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf
- https://jvn.jp/vu/JVNVU93383160/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.