Denial-of-Service Vulnerability in GX Works2 by Mitsubishi Electric
CVE-2023-5275
4.7MEDIUM
Key Information:
- Status
- Vendor
- CVE Published:
- 30 November 2023
Summary
An improper input validation vulnerability in the simulation function of GX Works2 allows an attacker to trigger a Denial-of-Service (DoS) condition. This is achieved by sending specially crafted packets. Notably, the attacker must originate these packets from the same personal computer where the GX Works2 function is operational, thus limiting the attack's scope to local environments.
Affected Version(s)
GX Works2 all versions
References
CVSS V3.1
Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved