Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-of-service (DoS) condition.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-5247
• https://jvn.jp/vu/JVNVU93383160/
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-016_en.pdf