CVE-2023-4088

7.8 highEPSS 0.2%

High (7.8) in mitsubishielectric gx works3. EPSS 0.2% chance of exploitation in the next 30 days.

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2023-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mitsubishielectric:gx_works3

References

https://jvn.jp/vu/JVNVU96447193/index.html
https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-03
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-010_en.pdf
https://jvn.jp/vu/JVNVU96447193/index.html
https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-03

Check your stack JSON