CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
70.7%
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Vendor | Product | Version | CPE |
---|---|---|---|
mitsubishielectric | c_controller_interface_module_utility | * | cpe:2.3:a:mitsubishielectric:c_controller_interface_module_utility:*:*:*:*:*:*:*:* |
mitsubishielectric | c_controller_module_setting_and_monitoring_tool | * | cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:*:*:*:*:*:*:*:* |
mitsubishielectric | cc-link_ie_control_network_data_collector | 1.00a | cpe:2.3:a:mitsubishielectric:cc-link_ie_control_network_data_collector:1.00a:*:*:*:*:*:*:* |
mitsubishielectric | cc-link_ie_field_network_data_collector | 1.00a | cpe:2.3:a:mitsubishielectric:cc-link_ie_field_network_data_collector:1.00a:*:*:*:*:*:*:* |
mitsubishielectric | cc-link_ie_tsn_data_collector | 1.00a | cpe:2.3:a:mitsubishielectric:cc-link_ie_tsn_data_collector:1.00a:*:*:*:*:*:*:* |
mitsubishielectric | cpu_module_logging_configuration_tool | * | cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:* |
mitsubishielectric | cw_configurator | * | cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* |
mitsubishielectric | data_transfer | * | cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:* |
mitsubishielectric | ezsocket | * | cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:* |
mitsubishielectric | fr_configurator_sw3 | * | cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
70.7%