CVE-2019-10972

2019-07-2523:31:47

CWE-400

icscert

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

JSON

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.

CNA Affected

[
  {
    "product": "Mitsubishi Electric FR Configurator2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1.16S and prior"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-204-01