CVE-2013-2817

CRITICAL 9.3CVE-2013-2817 · Published 24/02/2014 · updated 16/06/2026

In short

CVE-2013-2817 is a CRITICAL (CVSS 9.3) vulnerability affecting mc-worx suite (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mc-worx suite mitsubishielectric	`≤ 8.02`	No fix yet

Description

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.

References

ics-cert.us-cert.gov/advisories/ICSA-14-051-02 · US Government Resource
meau.com/eprise/main/sites/public/Products/Software/-MC_Works · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free