Denial of Service and XML External Entity Attacks for Mitsubishi Electric CW Configurator

Description

Uncontrolled resource consumption vulnerability in Mitsubishi Electronic CW Configurator version 1.010L and earlier allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors and conduct XML External Entity (XXE) attacks via unspecified vectors.

Affected Applications

CW Configurator

CVE References

CVE-2020-5603 CVE-2020-5602

Other References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf