Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2020-14496

Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

Description

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric CPU Module Logging Configuration Tool

  • All to ≤ 1.100Eaffected

Mitsubishi Electric CW Configurator

  • All to ≤ 1.010Laffected

Mitsubishi Electric Data Transfer

  • All to ≤ 3.40Saffected

Mitsubishi Electric EZSocket

  • All to ≤ 4.5affected

Mitsubishi Electric FR Configurator2

  • All to ≤ 1.22Yaffected

Mitsubishi Electric GT Designer3 Version1 (GOT2000)

  • All to ≤ 1.235Vaffected

Mitsubishi Electric GT SoftGOT1000 Version3

  • All to ≤ 3.200Jaffected

Mitsubishi Electric GT SoftGOT1000 Version3

  • Allaffected

Mitsubishi Electric GT SoftGOT2000 Version1

  • All to ≤ 1.235Vaffected

Mitsubishi Electric GX LogViewer

  • All to ≤ 1.100Eaffected

Mitsubishi Electric GX Works2

  • All to ≤ 1.592Saffected

Mitsubishi Electric GX Works3

  • All to ≤ 1.063Raffected

Mitsubishi Electric M_CommDTM-HART

  • All 1.00Aaffected

Mitsubishi Electric M_CommDTM-IO-Link

  • Allaffected

Mitsubishi Electric MELFA-Works

  • All to ≤ 4.3affected

Mitsubishi Electric MELSEC WinCPU Setting Utility

  • Allaffected

Mitsubishi Electric MELSOFT EM Software Development Kit (EM Configurator)

  • All to ≤ 1.010Laffected

Mitsubishi Electric MELSOFT FieldDeviceConfigurator

  • All to ≤ 1.03Daffected

Mitsubishi Electric MELSOFT Navigator

  • All to ≤ 2.62Qaffected

Mitsubishi Electric MH11 SettingTool Version2

  • All to ≤ 2.002Caffected

Mitsubishi Electric MI Configurator

  • Allaffected

Mitsubishi Electric Motorizer

  • All to ≤ 1.005Faffected

Mitsubishi Electric MR Configurator2

  • All to ≤ 1.105Kaffected

Mitsubishi Electric MT Works2

  • All to ≤ 1.156Naffected

Mitsubishi Electric MX Component

  • All to ≤ 4.19Vaffected

Mitsubishi Electric Network Interface Board CC IE Control utility

  • Allaffected

Mitsubishi Electric Network Interface Board CC IE Field Utility

  • Allaffected

Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility

  • Allaffected

Mitsubishi Electric Network Interface Board MNETH utility

  • Allaffected

Mitsubishi Electric PX Developer

  • All to ≤ 1.52Eaffected

Mitsubishi Electric RT ToolBox2

  • All to ≤ 3.72Aaffected

Mitsubishi Electric RT ToolBox3

  • All to ≤ 1.70Yaffected

Mitsubishi Electric Setting/monitoring tools for the C Controller module

  • Allaffected

References