What’s Vulnerable › Vulnerabilities

CVE-2013-2817

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-02-24 · updated 2026-06-16
• Weakness: CWE-94

Description

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.

Affected products

• Mitsubishielectric Mc-Worx Suite: through 8.02

References

• http://ics-cert.us-cert.gov/advisories/ICSA-14-051-02
• http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_Works
• http://ics-cert.us-cert.gov/advisories/ICSA-14-051-02
• http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_Works

Get alerted when CVE-2013-2817 or the next vulnerability affects your stack