CVE-2020-12013
CVE-2020-12013
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Jul 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server v10.96 and prior; ICONICS GenBroker32 v9.5 and prior.
Affected products
ICONICS · GenBroker32ICONICS · GenBroker64, Platform Services, Workbench, FrameWorX ServerMitsubishi Electric · MC Works32Mitsubishi Electric · MC Works64Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →