Malicious Code Execution Vulnerability in FA Engineering Software Products
Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GX Works3
Vendor
Mitsubishi Electric Corporation
Product
GX Works3
Platforms
Unknown
Default status
unaffected
GX Works3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
AL-PCS/WIN-E
Vendor
Mitsubishi Electric Corporation
Product
AL-PCS/WIN-E
Platforms
Unknown
Default status
unaffected
AL-PCS/WIN-E · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CPU Module Logging Configuration Tool
Vendor
Mitsubishi Electric Corporation
Product
CPU Module Logging Configuration Tool
Platforms
Unknown
Default status
unaffected
CPU Module Logging Configuration Tool · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
EZSocket
Vendor
Mitsubishi Electric Corporation
Product
EZSocket
Platforms
Unknown
Default status
unaffected
EZSocket · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
FR Configurator2
Vendor
Mitsubishi Electric Corporation
Product
FR Configurator2
Platforms
Unknown
Default status
unaffected
FR Configurator2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
FX Configurator-EN
Vendor
Mitsubishi Electric Corporation
Product
FX Configurator-EN
Platforms
Unknown
Default status
unaffected
FX Configurator-EN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
FX Configurator-EN-L
Vendor
Mitsubishi Electric Corporation
Product
FX Configurator-EN-L
Platforms
Unknown
Default status
unaffected
FX Configurator-EN-L · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
FX Configurator-FP
Vendor
Mitsubishi Electric Corporation
Product
FX Configurator-FP
Platforms
Unknown
Default status
unaffected
FX Configurator-FP · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GT Designer3 Version1(GOT1000)
Vendor
Mitsubishi Electric Corporation
Product
GT Designer3 Version1(GOT1000)
Platforms
Unknown
Default status
unaffected
GT Designer3 Version1(GOT1000) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GT Designer3 Version1(GOT2000)
Vendor
Mitsubishi Electric Corporation
Product
GT Designer3 Version1(GOT2000)
Platforms
Unknown
Default status
unaffected
GT Designer3 Version1(GOT2000) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GT SoftGOT1000 Version3
Vendor
Mitsubishi Electric Corporation
Product
GT SoftGOT1000 Version3
Platforms
Unknown
Default status
unaffected
GT SoftGOT1000 Version3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GT SoftGOT2000 Version1
Vendor
Mitsubishi Electric Corporation
Product
GT SoftGOT2000 Version1
Platforms
Unknown
Default status
unaffected
GT SoftGOT2000 Version1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GX LogViewer
Vendor
Mitsubishi Electric Corporation
Product
GX LogViewer
Platforms
Unknown
Default status
unaffected
GX LogViewer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GX Works2
Vendor
Mitsubishi Electric Corporation
Product
GX Works2
Platforms
Unknown
Default status
unaffected
GX Works2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MELSOFT FieldDeviceConfigurator
Vendor
Mitsubishi Electric Corporation
Product
MELSOFT FieldDeviceConfigurator
Platforms
Unknown
Default status
unaffected
MELSOFT FieldDeviceConfigurator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MELSOFT iQ AppPortal
Vendor
Mitsubishi Electric Corporation
Product
MELSOFT iQ AppPortal
Platforms
Unknown
Default status
unaffected
MELSOFT iQ AppPortal · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MELSOFT MaiLab
Vendor
Mitsubishi Electric Corporation
Product
MELSOFT MaiLab
Platforms
Unknown
Default status
unaffected
MELSOFT MaiLab · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MELSOFT Navigator
Vendor
Mitsubishi Electric Corporation
Product
MELSOFT Navigator
Platforms
Unknown
Default status
unaffected
MELSOFT Navigator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MELSOFT Update Manager
Vendor
Mitsubishi Electric Corporation
Product
MELSOFT Update Manager
Platforms
Unknown
Default status
unaffected
MELSOFT Update Manager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MX Component
Vendor
Mitsubishi Electric Corporation
Product
MX Component
Platforms
Unknown
Default status
unaffected
MX Component · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MX Sheet
Vendor
Mitsubishi Electric Corporation
Product
MX Sheet
Platforms
Unknown
Default status
unaffected
MX Sheet · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
PX Developer
Vendor
Mitsubishi Electric Corporation
Product
PX Developer
Platforms
Unknown
Default status
unaffected
PX Developer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
RT ToolBox3
Vendor
Mitsubishi Electric Corporation
Product
RT ToolBox3
Platforms
Unknown
Default status
unaffected
RT ToolBox3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
RT VisualBox
Vendor
Mitsubishi Electric Corporation
Product
RT VisualBox
Platforms
Unknown
Default status
unaffected
RT VisualBox · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
Data Transfer
Vendor
Mitsubishi Electric Corporation
Product
Data Transfer
Platforms
Unknown
Default status
unaffected
Data Transfer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
Data Transfer Classic
Vendor
Mitsubishi Electric Corporation
Product
Data Transfer Classic
Platforms
Unknown
Default status
unaffected
Data Transfer Classic · Scoped product and version facts