Vulnerability Description
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishielectric | Mc-Worx Suite | <= 8.02 |
Related Weaknesses (CWE)
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-051-02US Government Resource
- http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_WorksPatchVendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-051-02US Government Resource
- http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_WorksPatchVendor Advisory
FAQ
What is CVE-2013-2817?
CVE-2013-2817 is a vulnerability with a CVSS score of 9.3 (HIGH). An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction ...
How severe is CVE-2013-2817?
CVE-2013-2817 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-2817?
Check the references section above for vendor advisories and patch information. Affected products include: Mitsubishielectric Mc-Worx Suite.