CVE-2023-6943

criticalpriority · track · 40OT risk · elevatedEPSS 0.021 · 82 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.13% (82nd) EPSS

CVSS 9.8 · critical

Is it mine?

59 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to execute a malicious code by RPC with a path to a malicious library while connected to the products.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedEZSocketcisa_csaf_ot
EZSocket: Download version 5.A or later.
https://www.mitsubishielectric.com/fa/download/index.html
FixedGX Works2cisa_csaf_ot
GX Works2: Download version 1.630G or later.
https://www.mitsubishielectric.com/fa/download/index.html
FixedGX Works3cisa_csaf_ot
GX Works3: Download version 1.110Q or later.
https://www.mitsubishielectric.com/fa/download/index.html
FixedMELSOFT Navigatorcisa_csaf_ot
MELSOFT Navigator: Download version 2.106L or later.
https://www.mitsubishielectric.com/fa/download/index.html
FixedMT Works2cisa_csaf_ot
MT Works2: Download version 1.195D or later.
https://www.mitsubishielectric.com/fa/download/index.html
FixedMX Componentcisa_csaf_ot
MX Component: Download version 5.008J or later.
https://www.mitsubishielectric.com/fa/download/index.html
MitigationEZSocketcisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGT Designer3 Version1(GOT1000)cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGT Designer3 Version1(GOT2000)cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGX Works2cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationGX Works3cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMELSOFT Navigatorcisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMT Works2cisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMX Componentcisa_csaf_ot
Don't open untrusted files or click untrusted links.
MitigationMX OPC Server DA/UA (Software packaged with MC Works64)cisa_csaf_ot
Don't open untrusted files or click untrusted links.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jpexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-306USCWE-470USCWE-470US

affected products (59)

Products and version ranges known to be affected.

Mitsubishi Electric EZSocket: >=3.0|<5.92all versionscisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT1000): <=1.325Pall versionscisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT2000): <=1.320Jall versionscisa_csaf_otUS
Mitsubishi Electric GX Works2: >=1.11M|<1.626Call versionscisa_csaf_otUS
Mitsubishi Electric GX Works3: <=1.106Lall versionscisa_csaf_otUS
Mitsubishi Electric MELSOFT Navigator: >=1.04E|<2.102Gall versionscisa_csaf_otUS
Mitsubishi Electric MT Works2: <=1.190Yall versionscisa_csaf_otUS
Mitsubishi Electric MX Component: >=4.00A|<5.007Hall versionscisa_csaf_otUS
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric EZSocket3.0| → 5.92cisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT1000)≤ 1.325Pcisa_csaf_otUS
Mitsubishi Electric GT Designer3 Version1(GOT2000)≤ 1.320Jcisa_csaf_otUS
Mitsubishi Electric GX Works21.11M| → 1.626Ccisa_csaf_otUS
Mitsubishi Electric GX Works3≤ 1.106Lcisa_csaf_otUS
Mitsubishi Electric MELSOFT Navigator1.04E| → 2.102Gcisa_csaf_otUS
Mitsubishi Electric MT Works2≤ 1.190Ycisa_csaf_otUS
Mitsubishi Electric MX Component4.00A| → 5.007Hcisa_csaf_otUS
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64)≤ vers:all/*cisa_csaf_otUS
Mitsubishi Electric Corporation EZSocketall versionsenisa_euvdEU
Mitsubishi Electric Corporation EZSocket≤ 3.0 to 5.92enisa_euvdEU

showing 20 of 59

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-24-030-02Mitsubishi Electric FA Engineering Software Products (Update D)2024-01-30icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

published 2024-01-30modified 2026-06-17

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan