CVE-2023-5247

HIGH

Mitsubishielectric GX Works3 - Denial of Service

Title source: rule

Description

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.

References (2)

[Mitigation, Third Party Advisory] https://jvn.jp/vu/JVNVU93383160/

[Mitigation, Vendor Advisory] https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf

Scores

CVSS v3 7.8

EPSS 0.0009

EPSS Percentile 25.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-610 CWE-73

Status published

Affected Products (4)

mitsubishielectric/gx_works3

mitsubishielectric/melsoft_iq_appportal

mitsubishielectric/melsoft_navigator

mitsubishielectric/motion_control_setting

Timeline

Published Nov 30, 2023

Tracked Since Feb 18, 2026