VULNERABILITY INTELLIGENCE

CVE-2019-10972

CVSS score7.1 HIGH

EPSS probability0.89%

CISA KEVNot currently listed

Published2019-07-26

Last modified2026-06-17

Description

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.