CVE-2023-6943

criticalPriorität · verfolgen · 40OT-Risiko · erhöhtEPSS 0.021 · 82. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.13% (82nd) EPSS

CVSS 9.8 · critical

Is it mine?

59 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to execute a malicious code by RPC with a path to a malicious library while connected to the products.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenEZSocketcisa_csaf_ot
EZSocket: Download version 5.A or later.
https://www.mitsubishielectric.com/fa/download/index.html
BehobenGX Works2cisa_csaf_ot
GX Works2: Download version 1.630G or later.
https://www.mitsubishielectric.com/fa/download/index.html
BehobenGX Works3cisa_csaf_ot
GX Works3: Download version 1.110Q or later.
https://www.mitsubishielectric.com/fa/download/index.html
BehobenMELSOFT Navigatorcisa_csaf_ot
MELSOFT Navigator: Download version 2.106L or later.
https://www.mitsubishielectric.com/fa/download/index.html
BehobenMT Works2cisa_csaf_ot
MT Works2: Download version 1.195D or later.
https://www.mitsubishielectric.com/fa/download/index.html
BehobenMX Componentcisa_csaf_ot
MX Component: Download version 5.008J or later.
https://www.mitsubishielectric.com/fa/download/index.html
MitigationEZSocketcisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGT Designer3 Version1(GOT1000)cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGT Designer3 Version1(GOT2000)cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGX Works2cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGX Works3cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMELSOFT Navigatorcisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMT Works2cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMX Componentcisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMX OPC Server DA/UA (Software packaged with MC Works64)cisa_csaf_ot
Don't open untrusted files or click untrusted links.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jpAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-306USCWE-470USCWE-470US

betroffene Produkte (59)

Betroffene Produkte und Versionsbereiche.

Mitsubishi Electric EZSocket: >=3.0|<5.92alle Versionencisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT1000): <=1.325Palle Versionencisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT2000): <=1.320Jalle Versionencisa_csaf_otUS
Mitsubishi Electric GX Works2: >=1.11M|<1.626Calle Versionencisa_csaf_otUS
Mitsubishi Electric GX Works3: <=1.106Lalle Versionencisa_csaf_otUS
Mitsubishi Electric MELSOFT Navigator: >=1.04E|<2.102Galle Versionencisa_csaf_otUS
Mitsubishi Electric MT Works2: <=1.190Yalle Versionencisa_csaf_otUS
Mitsubishi Electric MX Component: >=4.00A|<5.007Halle Versionencisa_csaf_otUS
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*alle Versionencisa_csaf_otUS
Mitsubishi Electric EZSocket3.0| → 5.92cisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT1000)≤ 1.325Pcisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT2000)≤ 1.320Jcisa_csaf_otUS
Mitsubishi Electric GX Works21.11M| → 1.626Ccisa_csaf_otUS
Mitsubishi Electric GX Works3≤ 1.106Lcisa_csaf_otUS
Mitsubishi Electric MELSOFT Navigator1.04E| → 2.102Gcisa_csaf_otUS
Mitsubishi Electric MT Works2≤ 1.190Ycisa_csaf_otUS
Mitsubishi Electric MX Component4.00A| → 5.007Hcisa_csaf_otUS
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64)≤ vers:all/*cisa_csaf_otUS
Mitsubishi Electric Corporation EZSocketalle Versionenenisa_euvdEU
Mitsubishi Electric Corporation EZSocket≤ 3.0 to 5.92enisa_euvdEU

20 von 59 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-24-030-02Mitsubishi Electric FA Engineering Software Products (Update D)2024-01-30icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2024-01-30geändert 2026-06-17

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan