MITSUBISHI ELECTRIC GX Works3 CVE-2021-20588 Buffer Overflow Vulnerability

Description

Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering Software(C Controller module setting and monitoring tool all versions of GX Works3 versions 1.070Y and prior allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.

Affected Applications

GX Works3

CVE References

Other References