Mitsubishi Electric Corporation MELSOFT Navigator

• CVE-2023-6943 Critical 9.8 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versio 2.1%
• CVE-2023-6942 High 7.5 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Vers 0.9%
• CVE-2023-5247 High 7.8 Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious 0.3%
• CVE-2023-4088 Critical 9.3 Malicious Code Execution Vulnerability in FA Engineering Software Products 0.2%
• CVE-2021-20588 High 7.5 Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versi 6.9%
• CVE-2021-20587 High 7.5 Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Dat 3.9%