CVE-2025-7376 (CNNVD-202508-534)
中文标题:
Mitsubishi Electric多款产品 安全漏洞
英文标题:
Information Tampering Vulnerability in multiple processes of GENESIS64, MC Works64, and GENESIS
漏洞描述
中文描述:
Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64都是日本三菱电机（Mitsubishi Electric）公司的产品。Mitsubishi Electric MC Works64是一套数据采集与监控系统（SCADA）。Mitsubishi Electric GENESIS64是一个 SCADA 套件。 Mitsubishi Electric多款产品存在安全漏洞，该漏洞源于符号链接问题，可能导致拒绝服务。以下产品及版本受到影响：GENESIS64、GENESIS 11.00版本和MC Works64。
英文描述:
Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric Iconics Digital Solutions GENESIS64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS version 11.00, Mitsubishi Electric GENESIS64 all versions, Mitsubishi Electric MC Works64 all versions, and Mitsubishi Electric GENESIS version 11.00 allows a local authenticated attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the processes of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Mitsubishi Electric Corporation | GENESIS64 | all versions | - | - |
cpe:2.3:a:mitsubishi_electric_corporation:genesis64:all_versions:*:*:*:*:*:*:*
|
| Mitsubishi Electric Corporation | MC Works64 | all versions | - | - |
cpe:2.3:a:mitsubishi_electric_corporation:mc_works64:all_versions:*:*:*:*:*:*:*
|
| Mitsubishi Electric Iconics Digital Solutions | GENESIS64 | all versions | - | - |
cpe:2.3:a:mitsubishi_electric_iconics_digital_solutions:genesis64:all_versions:*:*:*:*:*:*:*
|
| Mitsubishi Electric Corporation | GENESIS | version 11.00 | - | - |
cpe:2.3:a:mitsubishi_electric_corporation:genesis:version_11.00:*:*:*:*:*:*:*
|
| Mitsubishi Electric Iconics Digital Solutions | GENESIS | version 11.00 | - | - |
cpe:2.3:a:mitsubishi_electric_iconics_digital_solutions:genesis:version_11.00:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-7376 |
2025-11-11 15:23:36 | 2025-11-11 07:40:51 |
| NVD | nvd_CVE-2025-7376 |
2025-11-11 15:00:58 | 2025-11-11 07:48:37 |
| CNNVD | cnnvd_CNNVD-202508-534 |
2025-11-11 15:12:52 | 2025-11-11 08:00:08 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202508-534
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']