Known vulnerabilities in GX Works2

Vendor: Mitsubishi Electric
Software: GX Works2
Software CPE: cpe:2.3:a:mitsubishi_electric:gx_works2:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GX Works2 GX Works2 is affected by 13 known vulnerabilities: 1 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85936 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2023-6943		 CWE-470 High
No
No
 - 31.01.2024 SB2024013127
#VU85933 - Missing Authentication for Critical Function
CVE-2023-6942		 CWE-306 Medium
No
No
 - 31.01.2024 SB2024013127
#VU83561 - Improper input validation
CVE-2023-5275		 CWE-20 Low
No
No
 - 29.11.2023 SB2023112916
#VU83559 - Improper input validation
CVE-2023-5274		 CWE-20 Low
No
No
 - 29.11.2023 SB2023112916
#VU59227 - Integer underflow
CVE-2021-20607		 CWE-191 Medium
No
No
 1.610L 05.01.2022 SB2022010506
#VU59226 - Out-of-bounds read
CVE-2021-20606		 CWE-125 Medium
No
No
 1.610L 05.01.2022 SB2022010506
#VU59224 - Improper Handling of Length Parameter Inconsistency
CVE-2021-20608		 CWE-130 Medium
No
No
 1.610L 05.01.2022 SB2022010504
#VU50840 - Improper Handling of Length Parameter Inconsistency
CVE-2021-20588		 CWE-130 Medium
No
No
 1.600A 22.02.2021 SB2021022220
#VU50839 - Heap-based Buffer Overflow
CVE-2021-20587		 CWE-122 Medium
No
No
 1.600A 22.02.2021 SB2021022220
#VU32955 - Permissions, Privileges, and Access Controls
CVE-2020-14496		 CWE-264 Medium
No
No
 1.595V 31.07.2020 SB2020073114
#VU32954 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14523		 CWE-22 Medium
No
No
 1.596W 31.07.2020 SB2020073115
#VU29430 - Resource exhaustion
CVE-2020-5603		 CWE-400 Medium
No
No
 1.590Q 01.07.2020 SB2020070113
#VU29429 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-5602		 CWE-611 Medium
No
No
 1.590Q 01.07.2020 SB2020070113