MELSOFT Navigator vulnerabilities

4 known vulnerabilities in MELSOFT Navigator from Mitsubishi Electric. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  EZSocket: Use of Externally-Controlled Input to Select Classes or Code

  CVE-2023-6943Jan 30, 2024Mitsubishi ElectricEPSS 2.13%

  Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions

• 7.5 High severity

  EZSocket: Missing Authentication for Critical Functionality

  CVE-2023-6942Jan 30, 2024Mitsubishi Electric

  Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions

• 7.8 High severity

  GX Works3: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2023-5247Nov 30, 2023Mitsubishi Electric

  Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted pro

• 7.8 High severity

  GX Works3: Incorrect Default Permissions

  CVE-2023-4088Sep 20, 2023Mitsubishi Electric

  Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denia