Mitsubishi Electric FR Configurator2
Successful exploitation of these vulnerabilities may enable arbitrary files to be read or cause a denial-of-service condition.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10976US | medium5.5 | — | ||
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project an… | ||||
| CVE-2019-10972US | medium5.5 | — | ||
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a us… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-204-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationFR Configurator2
Additional information about the vulnerabilities or Mitsubishi Electric's compensating control is available by contacting a local Mitsubishi Electric representative, which can be found at the following location:
https://us.mitsubishielectric.com/fa/en/about-us/distributors - MitigationFR Configurator2
Additional information about the vulnerabilities or Mitsubishi Electric's compensating control is available by contacting a local Mitsubishi Electric representative, which can be found at the following location:
https://us.mitsubishielectric.com/fa/en/about-us/distributors
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan