PT-2021-14060 · Mitsubishi · Mitsubishi Electric Fa Engineering

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric FA Engineering Software versions prior to the fixed version Description: A heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software allows a remote unauthenticated attacker to cause a DoS...

Mitsubishi Electric FA Engineering Software Products (Update H)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Products Vulnerabilities: Heap-based Buffer Overflow, Improper Handling of Length Parameter Inconsistency 2. UPDATE INFORMATION This updated...

Mitsubishi Electric FA Engineering Software Buffer Error Vulnerability

Mitsubishi Electric FA Engineering Software is a series of engineering software from Mitsubishi Electric Japan. A buffer error vulnerability exists in Mitsubishi Electric FA Engineering Software. The vulnerability stems from the software's mishandling of parameter lengths, and could allow an...

CVE-2020-5603

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver...

CVE-2020-5602

Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlie...

Xxe

Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlie...

CVE-2020-5603

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver...

CVE-2020-5602

Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlie...

CVE-2020-5602

CVE-2020-5602 is a vulnerability in Mitsubishi Electric Factory Automation software where an attacker can perform XML External Entity (XXE) attacks via unspecified vectors. Affected products span multiple tools (CPU Module Logging Configuration Tool, CW Configurator, EM Configurator/SDK, GT Desig...

CVE-2020-5603

CVE-2020-5603 concerns an Uncontrolled Resource Consumption DoS in Mitsubishi Electric Factory Automation software family (e.g., CPU Module Logging Configuration Tool, CW Configurator, EM Configurator, GT Designer3, GX LogViewer, GX Works2/3, MELFA-Works, MR/MT RT ToolBox tools, etc.). The root c...