CVE-2023-5247CWE-73

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a…

High · published November 30, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 17.0th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2023-11-30T03:57Z
EPSS history
Timeline
  • 30 NOV 03:57Z
    Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a…
    cvelistv5