CVE-2020-12007

Published: Jul 16, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; ICONICS GenBroker32 version 9.5 and prior.

Affected (11)

Products: Mitsubishielectric: Mc Works, Mc Works32 · Iconics: Energy Analytix, Facility Analytix, Genesis64, Hyper Historian, Mobilehmi, Quality Analytix, Smart Energy Analytix, Bizviz, Genesis32

2 products

9 products

Smart Energy Analytix

Bizviz

Genesis32

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mitsubishielectric Mc Works	Up to 10.95.208.31
Mitsubishielectric Mc Works32	Version 9.50.255.02

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Iconics Energy Analytix	All versions
Iconics Facility Analytix	All versions
Iconics Genesis64	All versions
Iconics Hyper Historian	All versions
Iconics Mobilehmi	All versions
Iconics Quality Analytix	All versions
Iconics Smart Energy Analytix	All versions