CVE-2019-10976CWE-611

Mitsubishi Electric FR Configurator2, Version 1.16S and prior

published July 25, 2019

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01019 · 63.0th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2019-07-25T23:27Z
EPSS history
Timeline
  • 25 JUL 23:27Z
    Mitsubishi Electric FR Configurator2, Version 1.16S and prior
    cvelistv5