CVE-2013-2817

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.

Score

CVSS 2.0 9.3 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-02-24

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Mc-worx Suite (Mitsubishielectric)

References

• http://ics-cert.us-cert.gov/advisories/ICSA-14-051-02
• http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_Works