Lucene search

IcscertCVE-2020-12011

HistoryJul 16, 2020 - 7:15 p.m.

CVE-2020-12011

2020-07-1619:15:11

CWE-787

icscert

web.nvd.nist.gov

cve-2020-12011

denial-of-service

remote code execution

vulnerability

mitsubishi electric

iconics

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.04

Percentile

92.1%

JSON

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; GenBroker32 version 9.5 and prior.

Affected configurations

Nvd

Node

mitsubishielectricmc_worksRange≤10.95.208.31

mitsubishielectricmc_works32Match9.50.255.02

Node

iconicsenergy_analytixMatch-

iconicsfacility_analytixMatch-

iconicsgenesis64Match-

iconicshyper_historianMatch-

iconicsmobilehmiMatch-

iconicsquality_analytixMatch-

iconicssmart_energy_analytixMatch-

Node

iconicsbizvizMatch-

iconicsgenesis32Match-

VendorProductVersionCPE
mitsubishielectricmc_works*cpe:2.3:a:mitsubishielectric:mc_works:*:*:*:*:*:*:*:*
mitsubishielectricmc_works329.50.255.02cpe:2.3:a:mitsubishielectric:mc_works32:9.50.255.02:*:*:*:*:*:*:*
iconicsenergy_analytix-cpe:2.3:a:iconics:energy_analytix:-:*:*:*:*:*:*:*
iconicsfacility_analytix-cpe:2.3:a:iconics:facility_analytix:-:*:*:*:*:*:*:*
iconicsgenesis64-cpe:2.3:a:iconics:genesis64:-:*:*:*:*:*:*:*
iconicshyper_historian-cpe:2.3:a:iconics:hyper_historian:-:*:*:*:*:*:*:*
iconicsmobilehmi-cpe:2.3:a:iconics:mobilehmi:-:*:*:*:*:*:*:*
iconicsquality_analytix-cpe:2.3:a:iconics:quality_analytix:-:*:*:*:*:*:*:*
iconicssmart_energy_analytix-cpe:2.3:a:iconics:smart_energy_analytix:-:*:*:*:*:*:*:*
iconicsbizviz-cpe:2.3:a:iconics:bizviz:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mitsubishielectric	mc_works	*	cpe:2.3:a:mitsubishielectric:mc_works::::::::
mitsubishielectric	mc_works32	9.50.255.02	cpe:2.3:a:mitsubishielectric:mc_works32:9.50.255.02:::::::*
iconics	energy_analytix	-	cpe:2.3:a:iconics:energy_analytix:-:::::::*
iconics	facility_analytix	-	cpe:2.3:a:iconics:facility_analytix:-:::::::*
iconics	genesis64	-	cpe:2.3:a:iconics:genesis64:-:::::::*
iconics	hyper_historian	-	cpe:2.3:a:iconics:hyper_historian:-:::::::*
iconics	mobilehmi	-	cpe:2.3:a:iconics:mobilehmi:-:::::::*
iconics	quality_analytix	-	cpe:2.3:a:iconics:quality_analytix:-:::::::*
iconics	smart_energy_analytix	-	cpe:2.3:a:iconics:smart_energy_analytix:-:::::::*
iconics	bizviz	-	cpe:2.3:a:iconics:bizviz:-:::::::*

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "product": "Mitsubishi Electric MC Works64",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Version 4.02C (10.95.208.31) and earlier"
      },
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "MC Works32",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Version 3.00A (9.50.255.02)"
      }
    ]
  },
  {
    "product": "ICONICS  GenBroker64, Platform Services, Workbench, FrameWorX Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v10.96 and prior"
      }
    ]
  },
  {
    "product": "GenBroker32",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v9.5 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-20-170-02

us-cert.cisa.gov/ics/advisories/icsa-20-170-03

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.04

Percentile

92.1%

JSON

Related for CVE-2020-12011