CVE-2023-5275
- State
- Published
- Severity
- 2.5 Low
- Published
- Nov 21, 2023
- Updated
- Feb 25, 2026
- Reserved
- Sep 29, 2023
Description
Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the function is running.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 2.5 Low | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L | Mitsubishi |
Weaknesses
- CWE-20 Improper Input Validation
Affected Products
| Product | Versions |
|---|---|
GX Works2Mitsubishi Electric Corporation |
|
References
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-015_en.pdfvendor-advisory
- https://jvn.jp/vu/JVNVU98760962/index.htmlgovernment-resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-03government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.