Skip to content
OpenAdvisories
Critical ICSA-23-269-03 1 CVE

Mitsubishi Electric FA Engineering Software (Update A)

Published Sep 26, 2023 · Updated Jul 9, 2024 · Revision 2

Vendor: Mitsubishi Electric Product: AL-PCS/WIN-E Product: CPU Module Logging Configuration Tool Product: Data Transfer Product: Data Transfer Classic Product: EZSocket Product: FR Configurator2 Product: FX Configurator-EN Product: FX Configurator-EN-L Product: FX Configurator-FP Product: GT Designer3 Version1 (GOT1000) Product: GT Designer3 Version1 (GOT2000) Product: GT SoftGOT1000 Version3 Product: GT SoftGOT2000 Version1 Product: GX LogViewer Product: GX Works2 Product: GX Works3 Product: MELSOFT FieldDeviceConfigurator Product: MELSOFT iQ AppPortal Product: MELSOFT MaiLab Product: MELSOFT Navigator Product: MELSOFT Update Manager Product: MX Component Product: MX Sheet Product: PX Developer Product: RT ToolBox3 Product: RT VisualBox

Summary

Successful exploitation of this vulnerability could allow a local attacker to execute code, which could result in information disclosure, tampering with and deletion of information, or a denial-of-service (DoS) condition.

Vulnerabilities 1

  • Critical 9.3
    CVE-2023-4088

    Malicious Code Execution Vulnerability in FA Engineering Software Products

    Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a deni…

    Mitsubishi Electric GX Works3 GX Works2 GT Designer3 Version1 (GOT2000) ICS / OT

Revision history

  1. #2

    Update A - Expanded affected products and updated mitigations section

  2. #1

    Initial Publication

References