PT-2016-3264 · Mitsubishi · Mitsubishi E-Designer

Rgod · Publicado 2016-06-01 · Atualizado 2019-10-09 · CVE-2017-9634

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mitsubishi E-Designer version 7.52 Build 344

Description The issue is related to a buffer overflow in memory when processing certain sections of a project file (.mpa), which can be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash. An attacker can exploit this issue remotely by using a specially crafted file or web page, potentially allowing them to execute code as an administrator or cause a denial of service.

Recommendations For Mitsubishi E-Designer version 7.52 Build 344, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2018-00778

CVE-2017-9634

ZDI-17-506

ZDI-17-507

Produtos afetados

Mitsubishi E-Designer

Referências · 8

• http://securityfocus.com/bid/100097 · Nota
• https://bdu.fstec.ru/vul/2018-00778 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-17-506 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9634 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9634 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01 · Nota
• https://securitylab.ru/news/487659.php · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-507 · Nota de Segurança