漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite
Vulnerability Description
Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3 allows a local authenticated attacker to execute a malicious code by tampering with a specially crafted DLL. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
死代码
Vulnerability Title
ICONICS GENESIS64 安全漏洞
Vulnerability Description
ICONICS GENESIS64是美国ICONICS公司的一款专为 Microsoft 操作系统设计的高级 HMI SCADA 解决方案套件。 ICONICS GENESIS64存在安全漏洞,该漏洞源于存在死代码漏洞,导致本地经过身份验证的攻击者可以通过篡改特制的DLL来执行恶意代码。
CVSS Information
N/A
Vulnerability Type
N/A