Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2020-14521

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element

Description

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric C Controller Interface Module Utility

Default version status: unaffected

  • unspecified to ≤ Version 2.00affected

Mitsubishi Electric CC-Link IE Control Network Data Collector

Default version status: unaffected

  • Version 1.00Aaffected

Mitsubishi Electric CC-Link IE Field Network Data Collector

Default version status: unaffected

  • Version 1.00Aaffected

Mitsubishi Electric CC-Link IE TSN Data Collector

Default version status: unaffected

  • Version 1.00Aaffected

Mitsubishi Electric CPU Module Logging Configuration Tool

Default version status: unaffected

  • unspecified to ≤ Version 1.100Eaffected

Mitsubishi Electric CW Configurator

Default version status: unaffected

  • unspecified to ≤ Version 1.010Laffected

Mitsubishi Electric Data Transfer

Default version status: unaffected

  • unspecified to ≤ Version 3.42Uaffected

Mitsubishi Electric EZSocket

Default version status: unaffected

  • unspecified to ≤ Version 5.1affected

Mitsubishi Electric FR Configurator SW3

Default version status: unaffected

  • All Versionsaffected

Mitsubishi Electric FR Configurator2

Default version status: unaffected

  • unspecified to ≤ Version 1.26Caffected

Mitsubishi Electric GT Designer2 Classic

Default version status: unaffected

  • All Versionsaffected

Mitsubishi Electric GT Designer3 Version1 (GOT1000)

Default version status: unaffected

  • unspecified to ≤ Version 1.241Baffected

Mitsubishi Electric GT Designer3 Version1 (GOT2000)

Default version status: unaffected

  • unspecified to ≤ Version 1.241Baffected

Mitsubishi Electric GT SoftGOT1000 Version3

Default version status: unaffected

  • unspecified to ≤ Version 3.200Jaffected

Mitsubishi Electric GT SoftGOT2000 Version1

Default version status: unaffected

  • unspecified to ≤ Version 1.241Baffected

Mitsubishi Electric GX Developer

Default version status: unaffected

  • unspecified to ≤ Version 8.504Aaffected

Mitsubishi Electric GX LogViewer

Default version status: unaffected

  • unspecified to ≤ Version 1.100Eaffected

Mitsubishi Electric GX Works2

Default version status: unaffected

  • unspecified to ≤ Version 1.601Baffected

Mitsubishi Electric GX Works3

Default version status: unaffected

  • unspecified to ≤ Version 1.063Raffected

Mitsubishi Electric M_CommDTM-IO-Link

Default version status: unaffected

  • unspecified to ≤ Version 1.03Daffected

Mitsubishi Electric MELFA-Works

Default version status: unaffected

  • unspecified to ≤ Version 4.4affected

Mitsubishi Electric MELSEC WinCPU Setting Utility

Default version status: unaffected

  • All Versionsaffected

Mitsubishi Electric MELSOFT Complete Clean Up Tool

Default version status: unaffected

  • unspecified to ≤ Version 1.06Gaffected

Mitsubishi Electric MELSOFT EM Software Development Kit

Default version status: unaffected

  • unspecified to ≤ Version 1.015Raffected

Mitsubishi Electric MELSOFT iQ AppPortal

Default version status: unaffected

  • unspecified to ≤ Version 1.17Taffected

Mitsubishi Electric MELSOFT Navigator

Default version status: unaffected

  • unspecified to ≤ Version 2.74Caffected

Mitsubishi Electric MI Configurator

Default version status: unaffected

  • unspecified to ≤ Version 1.004Eaffected

Mitsubishi Electric Motion Control Setting

Default version status: unaffected

  • unspecified to ≤ Version 1.005Faffected

Mitsubishi Electric Motorizer

Default version status: unaffected

  • unspecified to ≤ Version 1.005Faffected

Mitsubishi Electric MR Configurator2

Default version status: unaffected

  • unspecified to ≤ Version 1.125Faffected

Mitsubishi Electric MT Works2

Default version status: unaffected

  • unspecified to ≤ Version 1.167Zaffected

Mitsubishi Electric MTConnect Data Collector

Default version status: unaffected

  • unspecified to ≤ Version 1.1.4.0affected

Mitsubishi Electric MX Component

Default version status: unaffected

  • unspecified to ≤ Version 4.20Waffected

Mitsubishi Electric MX MESInterface

Default version status: unaffected

  • unspecified to ≤ Version 1.21Xaffected

Mitsubishi Electric MX MESInterface-R

Default version status: unaffected

  • unspecified to ≤ Version 1.12Naffected

Mitsubishi Electric MX Sheet

Default version status: unaffected

  • unspecified to ≤ Version 2.15Raffected

Mitsubishi Electric Network Interface Board CC IE Control Utility

Default version status: unaffected

  • unspecified to ≤ Version 1.29Faffected

Mitsubishi Electric Network Interface Board CC IE Field Utility

Default version status: unaffected

  • unspecified to ≤ Versions 1.16Saffected

Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility

Default version status: unaffected

  • unspecified to ≤ Version 1.23Zaffected

Mitsubishi Electric Network Interface Board MNETH Utility

Default version status: unaffected

  • unspecified to ≤ Version 34Laffected

Mitsubishi Electric Position Board utility 2

Default version status: unaffected

  • unspecified to ≤ Version 3.20affected

Mitsubishi Electric PX Developer

Default version status: unaffected

  • unspecified to ≤ Version 1.53Faffected

Mitsubishi Electric RT ToolBox2

Default version status: unaffected

  • unspecified to ≤ Version 3.73Baffected

Mitsubishi Electric RT ToolBox3

Default version status: unaffected

  • unspecified to ≤ Version 1.82Laffected

Mitsubishi Electric Setting/Monitoring tools for the C Controller module

Default version status: unaffected

  • unspecified to ≤ SW3PVC-CCPU Version 3.13Paffected
  • unspecified to ≤ SW4PVC-CCPU Version 4.12Naffected

Mitsubishi Electric SLMP Data Collector

Default version status: unaffected

  • unspecified to ≤ Version 1.04Eaffected

References