CVE-2023-6943

Summary

CVE-2023-6943 is a vulnerability known as "Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')". It affects multiple products from Mitsubishi Electric Corporation, including EZSocket versions 3.0 and later, FR Configurator2, GT Designer3 (GOT1000 and GOT2000 versions), GX Works2 versions 1.11M and later, GX Works3, MELSOFT Navigator versions 1.04E and later, MT Works2, MX Component versions 4.00A and later, and MX OPC Server DA/UA. This vulnerability allows a remote unauthenticated attacker to execute malicious code by RPC with a path to a malicious library while connected to the affected products. The risk score for this vulnerability is 67 out of 100, with a base severity of CRITICAL. The potential danger it poses to an organization includes high integrity impact and high confidentiality impact. Remediation steps are not mentioned in the provided information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.