CVE-2023-5247 Information

Description

Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file which could result in information disclosure tampering and deletion or a denial-of-service (DoS) condition.

Reference

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf https://jvn.jp/vu/JVNVU93383160/