by Kastro
Paper/Archive/CVE-2020-12011

CVE-2020-12011

icscert — A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code exec…

EPSS 29%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.2.982 × 2019.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; GenBroker32 version 9.5 and prior.

Affected

ProductAffectedFixed inSource
Mitsubishi Electric MC Works64Version 4.02C (10.95.208.31) and earlier–CNA
Mitsubishi Electric MC Works64all versions–CNA
MC Works32Version 3.00A (9.50.255.02)–CNA
ICONICS  GenBroker64, Platform Services, Workbench, FrameWorX Serverv10.96 and prior–CNA
GenBroker32v9.5 and prior–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-20-170-02refus-cert.cisa.gov/ics/advisories/icsa-20-170-03