7.8
High
CVE-2023-5247 Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA…
Description
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GX Works3 | Versions not published | |
| MELSOFT iQ AppPortal | Versions not published | |
| MELSOFT Navigator | Versions not published | |
| Motion Control Setting | Versions not published |
Other CVEs of GX Works3
The 17 CVEs of GX Works3 →
CVE-2026-15688
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control…
9.2
Critical
CVE-2023-6943
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi…
9.8
Critical
CVE-2023-6942
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to…
7.5
High
CVE-2023-4088
Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products…
9.3
Critical