CVEvulnerability
CVE-2020-14521
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.3 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-276, CWE-428
Description
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Affected configurations
• mitsubishielectric c controller interface module utility
• mitsubishielectric c controller module setting and monitoring tool
• mitsubishielectric cc-link ie control network data collector 1.00a
• mitsubishielectric cc-link ie field network data collector 1.00a
• mitsubishielectric cc-link ie tsn data collector 1.00a
• mitsubishielectric cpu module logging configuration tool (<= 1.100e)
• mitsubishielectric cw configurator (<= 1.010l)
• mitsubishielectric data transfer (<= 3.42u)
• mitsubishielectric ezsocket (<= 5.1)
• mitsubishielectric fr configurator sw3
• mitsubishielectric fr configurator2
• mitsubishielectric gt designer2 classic
• mitsubishielectric gt softgot1000 (>= 3.0 <= 3.200j)
• mitsubishielectric gt softgot2000 (>= 1.0 <= 1.241b)
• mitsubishielectric gx developer (<= 8.504a)
• mitsubishielectric gx logviewer (<= 1.100e)
• mitsubishielectric gx works2 (<= 1.601b)
• mitsubishielectric gx works3 (<= 1.063r)
• mitsubishielectric m commdtm-io-link
• mitsubishielectric melfa-works (<= 4.4)
• mitsubishielectric melsec wincpu setting utility
• mitsubishielectric melsoft complete clean up tool (<= 1.06g)
• mitsubishielectric melsoft em software development kit
• mitsubishielectric melsoft iq appportal (<= 1.17t)
• mitsubishielectric melsoft navigator (<= 2.74c)
• mitsubishielectric mi configurator
• mitsubishielectric motion control setting (<= 1.005f)
• mitsubishielectric motorizer (<= 1.005f)
• mitsubishielectric mr configurator2 (<= 1.125f)
• mitsubishielectric mt works2 (<= 1.167z)
• mitsubishielectric mtconnect data collector (<= 1.1.4.0)
• mitsubishielectric mx component (<= 4.20w)
• mitsubishielectric mx mesinterface (<= 1.21x)
• mitsubishielectric mx mesinterface-r (<= 1.12n)
• mitsubishielectric mx sheet (<= 2.15r)
• mitsubishielectric position board utility 2
• mitsubishielectric px developer (<= 1.53f)
• mitsubishielectric rt toolbox2 (<= 3.73b)
• mitsubishielectric rt toolbox3 (<= 1.82l)
• mitsubishielectric setting\/monitoring tools for the c controller module
• mitsubishielectric slmp data collector (<= 1.04e)
• mitsubishielectric gt designer3 (<= 1.241b)
• mitsubishielectric network interface board cc-link ver.2 utility firmware
• mitsubishielectric network interface board cc ie control utility firmware
• mitsubishielectric network interface board cc ie field utility firmware
• mitsubishielectric network interface board mneth utility firmware
Related
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf Vendor Advisory