CVE-2019-10976
Medium
Description
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.
SeverityMedium
CVSS5.5
Exploit probability—
ProductMitsubishielectric Electric Fr Configurator2 Firmware
PublishedJul 26, 2019
First seenJul 26, 2019
Weakness typeCWE-611XML external entity (XXE)
How to fix
Update
- mitsubishielectric electric_fr_configurator2_firmware1.16s or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric electric_fr_configurator2_firmware | v < 1.16s | 1.16s |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.