Описание
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 1.16s (исключая)
Одновременно
cpe:2.3:o:mitsubishielectric:electric_fr_configurator2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitsubishielectric:electric_fr_configurator2:-:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00206
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-611
CWE-611
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.
EPSS
Процентиль: 43%
0.00206
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-611
CWE-611