CVE-2019-10976

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric FR Configurator2 versions 1.16S and prior

Description The issue occurs when input passed to the XML parser is not properly sanitized while parsing the XML project and/or template file (.frc2). This allows an attacker to read arbitrary files once a user opens the file.

Recommendations For versions 1.16S and prior, update to a version that includes proper sanitization of input passed to the XML parser to prevent arbitrary file reading.