CVE-2017-9634 Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code executio...
CriticalCVSS 9.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric e-designer | = 7.52 | No fix listed |
| Mitsubishi Electric Europe E-Designer | = Version 7.52 Build 344. | No fix listed |
References
- 100097 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource