SARA / Free Tools / CVE / CVE-2020-12011

CVE-2020-12011 — A specially crafted communication packet sent to the affected systems could caus

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.5

CVSS
— —
EPSS
10.24% (top 6.90%)
CWE
CWE-787
Published
2020-07-16T18:53:05.000Z
Last modified
2024-08-04T11:48:57.125Z
CVSS vector
—

01What is this vulnerability?

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; GenBroker32…

02Affected products

VendorProductVersions
na / Mitsubishi Electric MC Works64Version 4.02C (10.95.208.31) and earlier, all versions
na / MC Works32Version 3.00A (9.50.255.02)
na / ICONICS  GenBroker64, Platform Services, Workbench, FrameWorX Serverv10.96 and prior
na / GenBroker32v9.5 and prior

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →