Описание
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.
Ссылки
- MitigationThird Party Advisory
- MitigationVendor Advisory
- MitigationThird Party Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.8 High
CVSS3
Дефекты
Связанные уязвимости
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.
Уязвимость программного обеспечения для программирования ПЛК Mitsubishi Electric GX Works3, программных средств управления приложениями для промышленных автоматизированных систем MELSOFT iQ AppPortal, MELSOFT Navigator и Motion Control Setting, позволяющая нарушителю выполнить произвольный код, раскрыть защищаемую информацию и вызвать отказ в обслуживании
EPSS
7.8 High
CVSS3