{"id":"CVE-2017-9636","aliases":["EUVD-2017-18567","GHSA-4jx9-v28q-gvp2"],"status":"published","title":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited...","description":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03522,"percentile":0.89313,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-122"],"published":"2018-04-17T14:00:00Z","modified":"2026-06-17T01:28:37Z","products":[{"vendor":"mitsubishi electric europe b.v.","product":"e-designer"},{"vendor":"mitsubishielectric","product":"e-designer"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/100097","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9636"},{"url":"https://github.com/advisories/GHSA-4jx9-v28q-gvp2"}],"sources":{"cve":[{"id":"CVE-2017-9636","description":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.","status":"published","published":"2018-04-17T14:00:00Z","modified":"2024-09-16T18:50:19.596Z","cwes":["CWE-122"],"updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18567","description":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.","status":"published","published":"2018-04-17T14:00:00Z","modified":"2024-09-16T18:50:19Z","updated_at":"2026-11-03T00:55:28.625786Z"}],"ghsa":[{"id":"GHSA-4jx9-v28q-gvp2","title":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited...","description":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.","status":"published","published":"2022-05-13T01:36:06Z","modified":"2023-02-01T05:08:40Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:49.403077Z"}],"nvd":[{"id":"CVE-2017-9636","description":"Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.","status":"published","published":"2018-04-17T14:29:00.417Z","modified":"2026-06-17T01:28:37.95Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-119"],"updated_at":"2026-11-02T14:04:17.032862Z"}]}}