CVEvulnerability

CVE-2020-14521

9.8 CRITICAL Published 2022-02-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.3 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-276, CWE-428

Description

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Affected configurations

• mitsubishielectric c controller interface module utility • mitsubishielectric c controller module setting and monitoring tool • mitsubishielectric cc-link ie control network data collector 1.00a • mitsubishielectric cc-link ie field network data collector 1.00a • mitsubishielectric cc-link ie tsn data collector 1.00a • mitsubishielectric cpu module logging configuration tool (<= 1.100e) • mitsubishielectric cw configurator (<= 1.010l) • mitsubishielectric data transfer (<= 3.42u) • mitsubishielectric ezsocket (<= 5.1) • mitsubishielectric fr configurator sw3 • mitsubishielectric fr configurator2 • mitsubishielectric gt designer2 classic • mitsubishielectric gt softgot1000 (>= 3.0 <= 3.200j) • mitsubishielectric gt softgot2000 (>= 1.0 <= 1.241b) • mitsubishielectric gx developer (<= 8.504a) • mitsubishielectric gx logviewer (<= 1.100e) • mitsubishielectric gx works2 (<= 1.601b) • mitsubishielectric gx works3 (<= 1.063r) • mitsubishielectric m commdtm-io-link • mitsubishielectric melfa-works (<= 4.4) • mitsubishielectric melsec wincpu setting utility • mitsubishielectric melsoft complete clean up tool (<= 1.06g) • mitsubishielectric melsoft em software development kit • mitsubishielectric melsoft iq appportal (<= 1.17t) • mitsubishielectric melsoft navigator (<= 2.74c) • mitsubishielectric mi configurator • mitsubishielectric motion control setting (<= 1.005f) • mitsubishielectric motorizer (<= 1.005f) • mitsubishielectric mr configurator2 (<= 1.125f) • mitsubishielectric mt works2 (<= 1.167z) • mitsubishielectric mtconnect data collector (<= 1.1.4.0) • mitsubishielectric mx component (<= 4.20w) • mitsubishielectric mx mesinterface (<= 1.21x) • mitsubishielectric mx mesinterface-r (<= 1.12n) • mitsubishielectric mx sheet (<= 2.15r) • mitsubishielectric position board utility 2 • mitsubishielectric px developer (<= 1.53f) • mitsubishielectric rt toolbox2 (<= 3.73b) • mitsubishielectric rt toolbox3 (<= 1.82l) • mitsubishielectric setting\/monitoring tools for the c controller module • mitsubishielectric slmp data collector (<= 1.04e) • mitsubishielectric gt designer3 (<= 1.241b) • mitsubishielectric network interface board cc-link ver.2 utility firmware • mitsubishielectric network interface board cc ie control utility firmware • mitsubishielectric network interface board cc ie field utility firmware • mitsubishielectric network interface board mneth utility firmware

Related

Weakness · CWE (2)

  • CWE-276 Incorrect Default Permissions weakness
  • CWE-428 Unquoted Search Path or Element weakness

References