Mitsubishi Electric FA Engineering Software Products
Successful exploitation of this vulnerability could allow a malicious attacker to execute malicious code by tricking legitimate users to open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service condition.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5247US | high7.8 | — | ||
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-334-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-334-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationGX Works3
Don't open untrusted files or click untrusted links.
- MitigationMELSOFT Navigator
Don't open untrusted files or click untrusted links.
- MitigationMELSOFT iQ AppPortal
Don't open untrusted files or click untrusted links.
- MitigationMotion Control Setting (Software packaged with GX Works3)
Don't open untrusted files or click untrusted links.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan