CVE-2019-10972

MEDIUM 5.5CVE-2019-10972 · Published 26/07/2019 · updated 17/06/2026

In short

CVE-2019-10972 is a MEDIUM (CVSS 5.5) vulnerability affecting electric fr configurator2 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
electric fr configurator2 mitsubishielectric	`≤ 1.16s`	No fix yet

Description

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.

References

us-cert.gov/ics/advisories/icsa-19-204-01 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free