« Volver al listado

CVE-2020-12007

Estado: ModificadaCrítica (9.8)—

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; ICONICS GenBroker32 version 9.5 and prior.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (11)

Iconics — BizvizIconics — Energy AnalytixIconics — Facility AnalytixIconics — Genesis32Iconics — Genesis64Iconics — Hyper HistorianIconics — MobilehmiIconics — Quality AnalytixIconics — Smart Energy AnalytixMitsubishielectric — MC WorksMitsubishielectric — MC Works32

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-12007",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "Mitsubishi Electric",
          "product": "MC Works64",
          "versions": [
            {
              "status": "affected",
              "version": "Version 4.02C (10.95.208.31) and earlier"
            },
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "vendor": "Mitsubishi Electric",
          "product": "MC Works32",
          "versions": [
            {
              "status": "affected",
              "version": "Version 3.00A (9.50.255.02)"
            }
          ]
        },
        {
          "vendor": "ICONICS",
          "product": "GenBroker64, Platform Services, Workbench, FrameWorX Server",
          "versions": [
            {
              "status": "affected",
              "version": "v10.96 and prior"
            }
          ]
        },
        {
          "vendor": "ICONICS",
          "product": "GenBroker32",
          "versions": [
            {
              "status": "affected",
              "version": "v9.5 and prior"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-07-16T22:15:11.337",
  "references": [
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-170-02%2C",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-170-03",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-170-02%2C",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-170-03",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; ICONICS GenBroker32 version 9.5 and prior."
    },
    {
      "lang": "es",
      "value": "Un paquete de comunicación especialmente diseñado enviado a los dispositivos afectados podría permitir una ejecución de código remota y una condición de denegación de servicio debido a una vulnerabilidad de deserialización. Este problema afecta: Mitsubishi Electric MC Works64 versión 4.02C (10.95.208.31) y anteriores, todas las versiones; Mitsubishi Electric MC Works32 versión 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server versión 10.96 y anteriores; ICONICS GenBroker32 versión 9.5 y anteriores"
    }
  ],
  "lastModified": "2026-06-17T02:51:14.557",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mitsubishielectric:mc_works:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9B1F646-0D54-4B3A-B39A-A45E1A0615EB",
              "versionEndIncluding": "10.95.208.31"
            },
            {
              "criteria": "cpe:2.3:a:mitsubishielectric:mc_works32:9.50.255.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A68D91E4-0C65-45F0-965E-A6AAE0E2F09F"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:iconics:energy_analytix:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD143148-B191-4D8E-9C28-09D4AC5D192C"
            },
            {
              "criteria": "cpe:2.3:a:iconics:facility_analytix:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE3C5226-94D4-4826-9B76-72626081DF46"
            },
            {
              "criteria": "cpe:2.3:a:iconics:genesis64:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17E644D8-AB8E-4E3C-AE4B-64D3BBCC30BF"
            },
            {
              "criteria": "cpe:2.3:a:iconics:hyper_historian:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78FF2A71-4918-491E-A5D8-DEB9E17FA6E4"
            },
            {
              "criteria": "cpe:2.3:a:iconics:mobilehmi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16745C56-A59A-4C38-92E1-FC5C63220989"
            },
            {
              "criteria": "cpe:2.3:a:iconics:quality_analytix:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "717A4B7B-2A42-4A9C-961F-1EA5E62FB188"
            },
            {
              "criteria": "cpe:2.3:a:iconics:smart_energy_analytix:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5082C435-FCCD-4CF6-891E-73F846A6FB40"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:iconics:bizviz:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF628CB2-BCA9-4E69-A9CB-846577F98DA1"
            },
            {
              "criteria": "cpe:2.3:a:iconics:genesis32:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "771DB32A-CD85-4638-B90E-25D9B4951DE5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}