Security Vulnerabilities fixed in GX LogViewer 2020-021

Description

Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electronic GX LogViewer 1.115U and earlier allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.

Affected Applications

GX LogViewer

CVE References

CVE-2021-20588 CVE-2021-20587

Other References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf