Описание
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.
Ссылки
- US Government Resource
- PatchVendor Advisory
- US Government Resource
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.02 (включая)
cpe:2.3:a:mitsubishielectric:mc-worx_suite:*:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.35786
Средний
9.3 Critical
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 3 лет назад
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.
EPSS
Процентиль: 97%
0.35786
Средний
9.3 Critical
CVSS2
Дефекты
CWE-94