CVE:CVE-2020-12013
CNNVD:CNNVD-202006-1207
Mitsubishi Electric MC Works32是日本三菱电机（Mitsubishi Electric）公司的一套数据采集与监控系统（SCADA）。
Mitsubishi Electric MC Works64 4.02C (10.95.208.31)及之前版本和ICONICS GENESIS64 FrameWorX Server 10.96及之前版本中存在SQL注入漏洞。远程攻击者可借助特制消息利用该漏洞执行任意SQL命令并泄漏、篡改内部数据。
solution:Upgrade mitsubishielectric mc_works32 to a higher version than 9.50.255.02,and avoid the version 9.50.255.02; Upgrade mitsubishielectric mc_works64 to a higher version than 10.95.208.31,and avoid the version (,10.95.208.31]; Upgrade iconics energy_analytix to a higher version than -; Upgrade iconics facility_analytix to a higher version than -; Upgrade iconics genesis64 to a higher version than -; Upgrade iconics hyper_historian to a higher version than -; Upgrade iconics mobilehmi to a higher version than -; Upgrade iconics quality_analytix to a higher version than -; Upgrade iconics smart_energy_analytix to a higher version than -; Upgrade iconics bizviz to a higher version than -; Upgrade iconics genesis32 to a higher version than -