CVE-2023-6943

🗓️ 30 Jan 2024 09:15:47Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Remote attacker can execute code via a remote procedure call using a malicious library path in affected Mitsubishi MELSOFT products.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerabilities of Mitsubishi Electric’s software products, including EZSocket, FR Configurator2, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, and MX OPC Server DA/UA (software included with MC Works64), are related to the use of external control inputs for class selection. This allows a malicious individual to execute arbitrary code.	31 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-6943	30 Jan 202410:31	–	circl
CNNVD	Various Mitsubishi Electric products Security breach	30 Jan 202400:00	–	cnnvd
CVE	CVE-2023-6943	30 Jan 202409:09	–	cve
Cvelist	CVE-2023-6943	30 Jan 202409:09	–	cvelist
EUVD	EUVD-2023-59140	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Engineering Software Products (Update D)	30 Jan 202407:00	–	ics
NVD	CVE-2023-6943	30 Jan 202409:15	–	nvd
Prion	Code injection	30 Jan 202409:15	–	prion
Positive Technologies	PT-2024-1401 · Mitsubishi · Mx +8	30 Jan 202400:00	–	ptsecurity

Source	Link
jvn	www.jvn.jp/vu/JVNVU95103362
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-030-02
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-020_en.pdf

04 May 2026 08:36Current

6Medium risk

Vulners AI Score6

CVSS 3.19.8

EPSS0.01844