Mitsubishi Electric FA Engineering Software Products
Successful exploitation of this vulnerability could allow a malicious attacker to execute malicious code by tricking legitimate users to open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service condition.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5247US | high7.8 | — | ||
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-334-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-334-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationGX Works3
Don't open untrusted files or click untrusted links.
- MitigationMELSOFT Navigator
Don't open untrusted files or click untrusted links.
- MitigationMELSOFT iQ AppPortal
Don't open untrusted files or click untrusted links.
- MitigationMotion Control Setting (Software packaged with GX Works3)
Don't open untrusted files or click untrusted links.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan