CVE-2020-12013
ICONICS Genesis64 TestQuery SQL Injection Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server v10.96 and prior; ICONICS GenBroker32 v9.5 and prior.
Un cliente WCF especialmente diseñado que interactúa con el puede permitir la ejecución de determinados comandos SQL arbitrarios remotamente. Esto afecta: Mitsubishi Electric MC Works64 Versión 4.02C (10.95.208.31) y anteriores, todas las versiones; Mitsubishi Electric MC Works32 versión 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server versión v10.96 y anteriores; ICONICS GenBroker32 versión v9.5 y anteriores
The vulnerablity allows remote attackers to execute arbitrary code on affected installations of ICONICS Genesis64. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the processing of requests to the TestQuery endpoint of the IcoFwxServer service. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-04-21 CVE Reserved
- 2020-06-30 CVE Published
- 2024-07-23 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-20-170-02 | Third Party Advisory | |
| https://us-cert.cisa.gov/ics/advisories/icsa-20-170-03 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mc Works32 Search vendor "Mitsubishielectric" for product "Mc Works32" | 9.50.255.02 Search vendor "Mitsubishielectric" for product "Mc Works32" and version "9.50.255.02" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mc Works64 Search vendor "Mitsubishielectric" for product "Mc Works64" | <= 10.95.208.31 Search vendor "Mitsubishielectric" for product "Mc Works64" and version " <= 10.95.208.31" | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Energy Analytix Search vendor "Iconics" for product "Energy Analytix" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Facility Analytix Search vendor "Iconics" for product "Facility Analytix" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Genesis64 Search vendor "Iconics" for product "Genesis64" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Hyper Historian Search vendor "Iconics" for product "Hyper Historian" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Mobilehmi Search vendor "Iconics" for product "Mobilehmi" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Quality Analytix Search vendor "Iconics" for product "Quality Analytix" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Smart Energy Analytix Search vendor "Iconics" for product "Smart Energy Analytix" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Bizviz Search vendor "Iconics" for product "Bizviz" | - | - |
Affected
| ||||||
| Iconics Search vendor "Iconics" | Genesis32 Search vendor "Iconics" for product "Genesis32" | - | - |
Affected
| ||||||