CVE-2023-5274

Опубликовано: 30 нояб. 2023

Источник: nvd

CVSS3: 2.5

CVSS3: 4.7

EPSS Низкий

Описание

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the function is running.

Ссылки

https://jvn.jp/vu/JVNVU98760962/index.html
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-03
Third Party Advisory
US Government Resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-015_en.pdf
Vendor Advisory
https://jvn.jp/vu/JVNVU98760962/index.html
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-03
Third Party Advisory
US Government Resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-015_en.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00044

Низкий

2.5 Low

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-q48c-wvxc-82g8

CVSS3: 2.5

github

около 2 лет назад

EPSS

Процентиль: 13%

0.00044

Низкий

2.5 Low

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-20