2 lines
7.9 KiB
JSON
2 lines
7.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"GX Works3","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"AL-PCS/WIN-E","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"CPU Module Logging Configuration Tool","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"EZSocket","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"FR Configurator2","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"FX Configurator-EN","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"FX Configurator-EN-L","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"FX Configurator-FP","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"GT Designer3 Version1(GOT1000)","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"GT Designer3 Version1(GOT2000)","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"GT SoftGOT1000 Version3","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"GT SoftGOT2000 Version1","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"GX LogViewer","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"GX Works2","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MELSOFT FieldDeviceConfigurator","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MELSOFT iQ AppPortal","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MELSOFT MaiLab","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MELSOFT Navigator","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MELSOFT Update Manager","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MX Component","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"MX Sheet","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"PX Developer","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"RT ToolBox3","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"RT VisualBox","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"Data Transfer","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]},{"defaultStatus":"unaffected","product":"Data Transfer Classic","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*","matchCriteriaId":"F4AEDEEE-5070-41E2-B4DC-6DE8456BC028","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder."},{"lang":"es","value":"Vulnerabilidad de Permisos Predeterminados Incorrectos debido a una solución incompleta para abordar CVE-2020-14496 en los productos de software de ingeniería de Mitsubishi Electric Corporation FA permite que un atacante local malicioso ejecute un código malicioso, lo que podría resultar en la divulgación, manipulación y eliminación de información, o una condición de denegación fuera de servicio (DoS). Sin embargo, si la versión mitigada descrita en el aviso para CVE-2020-14496 se utiliza y se instala en la carpeta de instalación predeterminada, esta vulnerabilidad no afecta a los productos."}],"id":"CVE-2023-4088","lastModified":"2026-06-17T06:37:03.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":6.0,"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4088","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-09-24T18:27:00.307770Z","version":"2.0.3"}}]},"published":"2023-09-20T03:15:13.687","references":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://jvn.jp/vu/JVNVU96447193/index.html"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-03"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-010_en.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://jvn.jp/vu/JVNVU96447193/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-03"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-010_en.pdf"}],"sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-276"}],"source":"nvd@nist.gov","type":"Primary"}]}
|