CVE-2019-10976

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.

• CWE-611
• CWE-611

• https://www.us-cert.gov/ics/advisories/icsa-19-204-01Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/icsa-19-204-01Third Party Advisory, US Government Resource

Published

Jul 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10970In Rockwell Automation PanelView 5510 (all versions manufact…9.8
• CVE-2019-10971The application (Network Configurator for DeviceNet Safety 3…
• CVE-2019-10972Mitsubishi Electric FR Configurator2, Version 1.16S and prio…5.5
• CVE-2019-10973Quest KACE, all versions prior to version 8.0.x, 8.1.x, and …
• CVE-2019-10974NREL EnergyPlus, Versions 8.6.0 and possibly prior versions,…5.5
• CVE-2019-10975An out-of-bounds read vulnerability has been identified in F…
• CVE-2019-10977In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E…7.5
• CVE-2019-10978Red Lion Controls Crimson, version 3.0 and prior and version…7.8
• CVE-2019-10979SICK MSC800 all versions prior to Version 4.0, the affected …
• CVE-2019-1098An information disclosure vulnerability exists when the Wind…
• CVE-2019-10980A type confusion vulnerability may be exploited when LAquis …7.8
• CVE-2019-10981In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40…7.8