CVE-2023-5247

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.

Date published : 2023-11-29

https://jvn.jp/vu/JVNVU93383160/

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf