Security Vulnerabilities fixed in Mitsubishi CPU Module Logging Configuration Tool 2020-004

Description

Uncontrolled resource consumption vulnerability in Mitsubishi Electronic CPU Module Logging Configuration Tool version 1.94Y and earlier allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors and conduct XML External Entity (XXE) attacks via unspecified vectors.

Affected Applications

CPU Module Logging Configuration Tool

CVE References

CVE-2020-5603 CVE-2020-5602

Other References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf