CVE-2017-9638

CRITICAL

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, deni...

Affects 1 product across 1 vendor.

BCS7.77
CVSS 3.09.8
EPSS3.6%
Percentile88th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

CWE-121: Stack-Based Buffer Overflow

Buffer overflow corrupting the program stack, typically overwriting the return address for code execution.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

CVE-2017-9638 affects Mitsubishi E-Designer version 7.52 Build 344, allowing an attacker to overwrite the stack and execute arbitrary code, leading to compromised data integrity, denial of service, and system crashes. The vulnerability has a high CVSS score of 9.8, indicating critical severity, but there is no known public exploit or proof of concept available.

BSID: BS-2018-GLOBAL-122012-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2017-9638?
CVE-2017-9638 affects Mitsubishi E-Designer version 7.52 Build 344, allowing an attacker to overwrite the stack and execute arbitrary code, leading to compromised data integrity, denial of service, and system crashes. The vulnerability has a high CVSS score of 9.8, indicating critical severity, but there is no known public exploit or proof of concept available.
What is the CVSS score for CVE-2017-9638?
CVE-2017-9638 has CVSS 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 3.6%.
Is CVE-2017-9638 actively exploited?
No confirmed active exploitation of CVE-2017-9638 as of 2026-05-30.
How do I remediate CVE-2017-9638?
Priority: HIGH. Advisory: https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01
What systems are affected by CVE-2017-9638?
CVE-2017-9638 affects: Mitsubishi Electric.
What NERC-CIP standard applies to CVE-2017-9638?
NERC CIP CIP-007 CIP-007-R2: This CVE violates CIP-007-R2 because it allows unauthorized access to the control system, potentially leading to loss of control and data integrity, which is a critical requirement for maintaining the reliability of the bulk electric system.
What IEC 62443 requirement maps to CVE-2017-9638?
IEC 62443 SR 7.6: This CVE maps to SR 7.6 because it involves a vulnerability that can be exploited to execute arbitrary code, which directly impacts the security requirements for protecting against malicious software and unauthorized access to industrial control systems.
Vulnerability Details
CVE IDCVE-2017-9638
BSIDBS-2018-GLOBAL-122012-C BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2018-04-17
Last Modified2024-11-21
ICS Relevance70%
Weakness (CWE)
Improper Restriction of Operations within Memory BufferStack-Based Buffer Overflow
Verticals
ICS-OT
SourceNVD
Official Description

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability can be exploited remotely without authentication, requiring low skill level. The attack vector is network-based, and the attacker can trigger the vulnerability by sending specially crafted data to the affected application, leading to stack overflow and potential arbitrary code execution.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductFixed Version
Mitsubishi Electric E-Designer —
Remediation
View Vendor Advisory →

Remediation Priority: HIGH

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 3021 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
● Virtual Patch — CITED Relevance SAGE Engine MEDIUM CONFIDENCE

Implement network segmentation and access controls to limit exposure to the vulnerable application. Regularly monitor network traffic for suspicious activity and apply the latest vendor patches as soon as they become available.

No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.

NERC CIP: CIP-007 CIP-007-R2
This CVE violates CIP-007-R2 because it allows unauthorized access to the control system, potentially leading to loss of control and data integrity, which is a critical requirement for maintaining the reliability of the bulk electric system.
IEC 62443: SR 7.6
This CVE maps to SR 7.6 because it involves a vulnerability that can be exploited to execute arbitrary code, which directly impacts the security requirements for protecting against malicious software and unauthorized access to industrial control systems.

Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.

SAGE Enrichment Record — provenance & audit hash
ModelQwen/Qwen2.5-72B-Instruct-AWQ
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hasha2033e9d5e1cc9de38106a0416ae0472ddef5987e80c4cc4a2a4948fcdb39bd2436e1b61b4a97e1680a3e392028e6dec15d55fc3fed021ad3f1fadef18820118
Related CVEs affecting Mitsubishi Electric
CVE-2013-3075 10.0 Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3... CVE-2019-14926 9.8 An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices thr... CVE-2017-9634 9.8 Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections whic... CVE-2017-9636 9.8 Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections whi... CVE-2019-14929 9.8 An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices thr...
View all Mitsubishi Electric CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →