Skip to content
Sign in
9.3 Critical

CVE-2023-4088 Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products…

Description

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.

Affected products and versions

Product Affected versions Fixed in
GX Works3 Versions not published
AL-PCS/WIN-E Versions not published
CPU Module Logging Configuration Tool Versions not published
EZSocket Versions not published
FR Configurator2 Versions not published
FX Configurator-EN Versions not published
FX Configurator-EN-L Versions not published
FX Configurator-FP Versions not published
GT Designer3 Version1(GOT1000) Versions not published
Show the 17 other branches
Product Affected versions Fixed in
GT Designer3 Version1(GOT2000) Versions not published
GT SoftGOT1000 Version3 Versions not published
GT SoftGOT2000 Version1 Versions not published
GX LogViewer Versions not published
GX Works2 Versions not published
MELSOFT FieldDeviceConfigurator Versions not published
MELSOFT iQ AppPortal Versions not published
MELSOFT MaiLab Versions not published
MELSOFT Navigator Versions not published
MELSOFT Update Manager Versions not published
MX Component Versions not published
MX Sheet Versions not published
PX Developer Versions not published
RT ToolBox3 Versions not published
RT VisualBox Versions not published
Data Transfer Versions not published
Data Transfer Classic Versions not published

Other CVEs of GX Works3

The 17 CVEs of GX Works3 →
CVE-2026-15688 Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control… 9.2 Critical CVE-2023-6943 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi… 9.8 Critical CVE-2023-6942 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to… 7.5 High CVE-2023-5247 Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA… 7.8 High
Track this CVE