CVE-2013-2817
critical
CVSS v3
—
CVSS v2
9.3
VIR risk
9.3
Description
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: ics-cert@hq.dhs.gov — http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_Works
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mitsubishielectric | mc-worx_suite | {"endIncluding":"8.02"} | |
References
CWEs
CWE-94
Verify integrity in audit chain (admin only). AS-IS.