May 9, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – Prima Systems FlexAir Multiple Vulnerabilities
August 1, 2019Rewterz Threat Advisory – CVE 2019-10974 – NREL EnergyPlus Denial of Service Vulnerability
August 1, 2019Rewterz Threat Advisory – Prima Systems FlexAir Multiple Vulnerabilities
August 1, 2019Rewterz Threat Advisory – CVE 2019-10974 – NREL EnergyPlus Denial of Service Vulnerability
August 1, 2019
Severity
Medium
Analysis Summary
CVE 2019-10976
This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.
CVE 2019-10972
This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.
Impact
Uncontrolled Resource Consumption
Affected Vendors
Mitsubishi Electric
Affected Products
Mitsubishi Electric FR Configurator2 Version 1.16S and prior
Remediation
Mitsubishi Electric has released Version 1.17T for the reported vulnerabilities.
