Project File Processing Flaw in Mitsubishi Electric Software
CVE-2019-10972

5.5MEDIUM

Key Information:

Vendor

Mitsubishi Electric

Status
Mitsubishi Electric Fr Configurator2
Vendor
CVE Published:
26 July 2019

What is CVE-2019-10972?

A vulnerability exists in Mitsubishi Electric's FR Configurator2 software, specifically versions up to and including 1.16S. This flaw can be exploited when a user opens a malicious project file (.frc2) that has been crafted by an attacker. Once the rogue project file is opened, it leads to a condition of CPU exhaustion, rendering the application unresponsive. As a result, the software must be restarted to regain functionality, which can pose significant operational risks in critical systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Mitsubishi Electric FR Configurator2 Version 1.16S and prior

References

https://www.us-cert.gov/ics/advisories/icsa-19-204-01
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.