Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.
References
Link | Resource |
---|---|
https://jvn.jp/vu/JVNVU93383160/ | Mitigation Third Party Advisory |
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf | Mitigation Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Mitsubishi
Published: 2023-11-30T03:57:30.083Z
Updated: 2023-11-30T03:57:30.083Z
Reserved: 2023-09-28T07:26:44.445Z
Link: CVE-2023-5247
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-11-30T04:15:07.867
Modified: 2023-12-05T18:28:03.620
Link: CVE-2023-5247
JSON object: View
Redhat Information
No data.