CVE-2019-10972

MEDIUM

Mitsubishi Electric FR Configurator2 < 1.16s - Denial of Service via Malicious Project File

Title source: llm

Description

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.us-cert.gov/ics/advisories/icsa-19-204-01

Scores

CVSS v3 5.5

EPSS 0.0016

EPSS Percentile 35.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-770 CWE-400

Status published

Products (1)

mitsubishielectric/electric_fr_configurator2 < 1.16s

Published Jul 26, 2019

Tracked Since Feb 18, 2026