PT-2019-12116
CVE-2019-10976
·
تاريخ النشر
2019-07-25
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mitsubishi Electric FR Configurator2 versions 1.16S and prior
Description
The issue occurs when input passed to the XML parser is not properly sanitized while parsing the XML project and/or template file (.frc2). This allows an attacker to read arbitrary files once a user opens the file.
Recommendations
For versions 1.16S and prior, update to a version that includes proper sanitization of input passed to the XML parser to prevent arbitrary file reading.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾