CVE-2020-12011 Memory corruption in GenBroker32

Critical 9.8 Published 16 Jul 2020 Updated 4 Aug 2024

Attackers can send crafted packets to cause denial of service or remote code execution in Mitsubishi and ICONICS SCADA systems.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-12011?

CVE-2020-12011 is a critical memory corruption vulnerability in GenBroker32, published on 16 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; GenBroker32 version 9.5 and prior.

Weakness: CWE-787

Which versions are affected by CVE-2020-12011?

It affects 11 products.

Products include Iconics Bizviz, Iconics Energy Analytix, Iconics Facility Analytix, Iconics Genesis32, Iconics Genesis64, Iconics Hyper Historian and 5 more.

How do I fix CVE-2020-12011?

No fix has been published for CVE-2020-12011 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-12011 being exploited?

There is no known exploitation of CVE-2020-12011 in the wild and no public exploit code.

Sources

Also known as GHSA-p8wr-hxwm-p363.