Lucene search

[email protected]CVE-2023-5247

HistoryNov 30, 2023 - 4:15 a.m.

CVE-2023-5247

2023-11-3004:15:07

CWE-610

CWE-73

[email protected]

web.nvd.nist.gov

cve-2023-5247

malicious code execution

mitsubishi electric

fa engineering software

vulnerability

information disclosure

tampering

deletion

dos

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

22.1%

JSON

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.

CPENameOperatorVersion
mitsubishielectric:gx_works3mitsubishielectric gx works3eq*
mitsubishielectric:gx_works3mitsubishielectric gx works3eq1.065t
mitsubishielectric:gx_works3mitsubishielectric gx works3eq-
mitsubishielectric:gx_works3mitsubishielectric gx works3eq1.060n
mitsubishielectric:gx_works3mitsubishielectric gx works3eq1.063r
mitsubishielectric:gx_works3mitsubishielectric gx works3eq1.070y
mitsubishielectric:melsoft_iq_appportalmitsubishielectric melsoft iq appportaleq*
mitsubishielectric:melsoft_iq_appportalmitsubishielectric melsoft iq appportaleq1.17t
mitsubishielectric:melsoft_iq_appportalmitsubishielectric melsoft iq appportaleq1.14q
mitsubishielectric:melsoft_iq_appportalmitsubishielectric melsoft iq appportaleq-

CPE	Name	Operator	Version
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	*
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	1.065t
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	-
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	1.060n
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	1.063r
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	1.070y
mitsubishielectric:melsoft_iq_appportal	mitsubishielectric melsoft iq appportal	eq	*
mitsubishielectric:melsoft_iq_appportal	mitsubishielectric melsoft iq appportal	eq	1.17t
mitsubishielectric:melsoft_iq_appportal	mitsubishielectric melsoft iq appportal	eq	1.14q
mitsubishielectric:melsoft_iq_appportal	mitsubishielectric melsoft iq appportal	eq	-

Rows per page:

1-10 of 201

References

jvn.jp/vu/JVNVU93383160/

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

22.1%

JSON

Related for CVE-2023-5247

ics1 prion1