Malicious Code Execution Vulnerability in FA Engineering Software Products
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.2%
exploitation probability
0.2%top 93% of all CVEs
observed exploitation
nono source reports it
Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Mitsubishi Electric Corporation · AL-PCS/WIN-EMitsubishi Electric Corporation · CPU Module Logging Configuration ToolMitsubishi Electric Corporation · Data TransferMitsubishi Electric Corporation · Data Transfer ClassicMitsubishi Electric Corporation · EZSocketMitsubishi Electric Corporation · FR Configurator2Mitsubishi Electric Corporation · FX Configurator-ENMitsubishi Electric Corporation · FX Configurator-EN-LMitsubishi Electric Corporation · FX Configurator-FPMitsubishi Electric Corporation · GT Designer3 Version1(GOT1000)Mitsubishi Electric Corporation · GT Designer3 Version1(GOT2000)Mitsubishi Electric Corporation · GT SoftGOT1000 Version3Mitsubishi Electric Corporation · GT SoftGOT2000 Version1Mitsubishi Electric Corporation · GX LogViewerMitsubishi Electric Corporation · GX Works2Mitsubishi Electric Corporation · GX Works3Mitsubishi Electric Corporation · MELSOFT FieldDeviceConfiguratorMitsubishi Electric Corporation · MELSOFT iQ AppPortalMitsubishi Electric Corporation · MELSOFT MaiLabMitsubishi Electric Corporation · MELSOFT NavigatorMitsubishi Electric Corporation · MELSOFT Update ManagerMitsubishi Electric Corporation · MX ComponentMitsubishi Electric Corporation · MX SheetMitsubishi Electric Corporation · PX DeveloperMitsubishi Electric Corporation · RT ToolBox3Mitsubishi Electric Corporation · RT VisualBox