Command injection

2020-10-0518:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.1%

JSON

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

CPENameOperatorVersion
fr-a8ncge_firmwareeq<= 2020-8
fr-e800-epa_firmwareeq<= 2020-7
fr-e800-epb_firmwareeq<= 2020-7
fx5uc-32mr\\/ds-ts_firmwareeq1.210
fx5uc-32mt\\/d_firmwareeq1.210
fx5uc-32mt\\/ds-ts_firmwareeq1.210
fx5uc-32mt\\/dss-ts_firmwareeq1.210
fx5uc-32mt\\/dss_firmwareeq1.210
fx5uj-24mr\\/es_firmwareeq1.000
fx5uj-24mt\\/es_firmwareeq1.000

Name	Operator	Version
fr-a8ncge_firmware	eq	<= 2020-8
fr-e800-epa_firmware	eq	<= 2020-7
fr-e800-epb_firmware	eq	<= 2020-7
fx5uc-32mr\\/ds-ts_firmware	eq	1.210
fx5uc-32mt\\/d_firmware	eq	1.210
fx5uc-32mt\\/ds-ts_firmware	eq	1.210
fx5uc-32mt\\/dss-ts_firmware	eq	1.210
fx5uc-32mt\\/dss_firmware	eq	1.210
fx5uj-24mr\\/es_firmware	eq	1.000
fx5uj-24mt\\/es_firmware	eq	1.000