CVE-2020-12011

🗓️ 16 Jul 2020 18:53:05Reported by icscertType

Denial-of-service and remote code execution vulnerability in Mitsubishi Electric MC Works64, MC Works32, ICONICS GenBroker64, and GenBroker32

Reporter	Title	Published	Views	Family All 9
CNVD	Mitsubishi Electric MC Works64 and MC Works32 Buffer Overflow Vulnerability	19 Jun 202000:00	–	cnvd
Cvelist	CVE-2020-12011	16 Jul 202018:53	–	cvelist
ICS	Mitsubishi Electric MC Works64, MC Works32	18 Jun 202000:00	–	ics
ICS	ICONICS GENESIS64, GENESIS32	18 Jun 202000:00	–	ics
NVD	CVE-2020-12011	16 Jul 202019:15	–	nvd
Prion	Remote code execution	16 Jul 202019:15	–	prion
RedhatCVE	CVE-2020-12011	9 Jan 202609:56	–	redhatcve
Tenable Nessus	Mitsubishi (CVE-2020-12011) (deprecated)	7 Feb 202200:00	–	nessus
Zero Day Initiative	(Pwn2Own) ICONICS Genesis64 VariantClear Out-Of-Bounds Access Remote Code Execution Vulnerability	30 Jun 202000:00	–	zdi

NVD

Vulners

Node

mitsubishielectric mc_worksRange≤10.95.208.31

mitsubishielectric mc_works32Match9.50.255.02

Node

iconics energy_analytixMatch-

iconics facility_analytixMatch-

iconics genesis64Match-

iconics hyper_historianMatch-

iconics mobilehmiMatch-

iconics quality_analytixMatch-

iconics smart_energy_analytixMatch-

Node

iconics bizvizMatch-

iconics genesis32Match-

[
  {
    "product": "Mitsubishi Electric MC Works64",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Version 4.02C (10.95.208.31) and earlier"
      },
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "MC Works32",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Version 3.00A (9.50.255.02)"
      }
    ]
  },
  {
    "product": "ICONICS  GenBroker64, Platform Services, Workbench, FrameWorX Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v10.96 and prior"
      }
    ]
  },
  {
    "product": "GenBroker32",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v9.5 and prior"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-170-03
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-170-02

21 Nov 2024 04:59Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.10238

CWE-787