CVE-2023-6943

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 30, 2024
Updated: Feb 8, 2024
CWE ID 470

Summary

CVE-2023-6943 is a vulnerability known as "Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')". It affects multiple products from Mitsubishi Electric Corporation, including EZSocket versions 3.0 and later, FR Configurator2, GT Designer3 (GOT1000 and GOT2000 versions), GX Works2 versions 1.11M and later, GX Works3, MELSOFT Navigator versions 1.04E and later, MT Works2, MX Component versions 4.00A and later, and MX OPC Server DA/UA. This vulnerability allows a remote unauthenticated attacker to execute malicious code by RPC with a path to a malicious library while connected to the affected products. The risk score for this vulnerability is 67 out of 100, with a base severity of CRITICAL. The potential danger it poses to an organization includes high integrity impact and high confidentiality impact. Remediation steps are not mentioned in the provided information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6943 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options