CVE-2019-10972 - Mitsubishi Electric FR Configurator2, Version 1.16S and prior

Back Back to CVE browser

MEDIUM

Mitsubishi Electric FR Configurator2, Version 1.16S and prior

Published Jul 25, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 0.89%

Description

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.

Affected products

Vendor Mitsubishi Electric Product Mitsubishi Electric FR Configurator2 Default
n/a
- Version
  Version 1.16S and prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mitsubishi Electric

Mitsubishi Electric FR Configurator2

n/a

Version	Status	Constraints
Version 1.16S and prior	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-770

Allocation of Resources Without Limits

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2686
Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-204-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2686		Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-204-01		x_refsource_MISCThird Party AdvisoryUS Government Resource