PT-2016-3263 · Mitsubishi · Mitsubishi E-Designer
Rgod
·
Published
2016-06-01
·
Updated
2019-10-09
·
CVE-2017-9636
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Mitsubishi E-Designer version 7.52 Build 344
Description
The issue is related to a heap-based buffer overflow in the processing of a driver configuration file, which can be exploited to achieve arbitrary code execution, compromise data integrity, cause a denial of service, or result in a system crash. This can be triggered by a remote attacker using a specially crafted file or web page.
Recommendations
For Mitsubishi E-Designer version 7.52 Build 344, consider disabling the processing of driver configuration files until a patch is available to prevent potential exploitation. Restrict access to the configuration file handling module to minimize the risk of remote code execution. Avoid using specially crafted files or web pages that could trigger the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Mitsubishi E-Designer