high7.8
CVE-2023-5247
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a m…
Impact
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Gx Works3 | All versions |
| Mitsubishielectric | Melsoft Iq Appportal | All versions |
| Mitsubishielectric | Melsoft Navigator | All versions |
| Mitsubishielectric | Motion Control Setting | All versions |