CVE-2023-5275: Input Validation
Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the function is running.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-5275?
CVE-2023-5275 is an Improper Input Validation vulnerability in the simulation function of GX Works2, which allows an attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets.
How severe is CVE-2023-5275?
CVE-2023-5275 has a severity rating of 4.7, which is considered medium.
What is the affected software?
The affected software is Mitsubishi Electric GX Works2.
How can an attacker exploit CVE-2023-5275?
An attacker can exploit CVE-2023-5275 by sending specially crafted packets from within the same personal computer where the function is running.
Are there any fixes or patches available for CVE-2023-5275?
For information regarding fixes or patches for CVE-2023-5275, please refer to the official advisories provided by Mitsubishi Electric and CISA.