Към съдържанието
Търсене

CVE-2023-4088: Mitsubishi Electric Corporation GX Works3, лоша

9.3

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.

Засегнати продукти

  • Mitsubishi Electric Corporation GX Works3: all versions
  • Mitsubishi Electric Corporation AL-PCS/WIN-E: all versions
  • Mitsubishi Electric Corporation CPU Module Logging Configuration Tool: all versions
  • Mitsubishi Electric Corporation EZSocket: all versions
  • Mitsubishi Electric Corporation FR Configurator2: all versions
  • Mitsubishi Electric Corporation FX Configurator-EN: all versions
  • Mitsubishi Electric Corporation FX Configurator-EN-L: all versions
  • Mitsubishi Electric Corporation FX Configurator-FP: all versions
  • Mitsubishi Electric Corporation GT Designer3 Version1(GOT1000): all versions
  • Mitsubishi Electric Corporation GT Designer3 Version1(GOT2000): all versions
  • Mitsubishi Electric Corporation GT SoftGOT1000 Version3: all versions
  • Mitsubishi Electric Corporation GT SoftGOT2000 Version1: all versions
  • Mitsubishi Electric Corporation GX LogViewer: all versions
  • Mitsubishi Electric Corporation GX Works2: all versions
  • Mitsubishi Electric Corporation MELSOFT FieldDeviceConfigurator: all versions
  • Mitsubishi Electric Corporation MELSOFT iQ AppPortal: all versions
  • Mitsubishi Electric Corporation MELSOFT MaiLab: all versions
  • Mitsubishi Electric Corporation MELSOFT Navigator: all versions
  • Mitsubishi Electric Corporation MELSOFT Update Manager: all versions
  • Mitsubishi Electric Corporation MX Component: all versions
  • Mitsubishi Electric Corporation MX Sheet: all versions
  • Mitsubishi Electric Corporation PX Developer: all versions
  • Mitsubishi Electric Corporation RT ToolBox3: all versions
  • Mitsubishi Electric Corporation RT VisualBox: all versions
  • Mitsubishi Electric Corporation Data Transfer: all versions
  • Mitsubishi Electric Corporation Data Transfer Classic: all versions

Вид слабост

История

  • 20 септември 2023 Публикувано

Други уязвимости в Mitsubishi Electric Corporation GX Works3

Първоизточници