CVE-2023-4088: Mitsubishielectric Gx WORKS3

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.

Affected products

• Mitsubishielectric Gx WORKS3: any version

Published 2023-09-20. Last modified 2026-06-17.