CVE-2017-9634

Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-04-17

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• E-designer (Mitsubishi Electric Europe B.v.)
• E-designer (Mitsubishielectric)

References

• http://www.securityfocus.com/bid/100097
• https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01