Security Vulnerabilities fixed in Mitsubishi MR Configurator2 2020-004

Description

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric MR Configurator2 version 1.72A and earlier allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors and conduct XML External Entity (XXE) atacks via unspecified vectors.

Affected Applications

MR Configurator2

CVE References

CVE-2020-5603 CVE-2020-5602

Other References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf