Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2020-14523

Mitsubishi Electric Factory Automation Products Path Traversal

Description

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric CW Configurator

  • unspecified to ≤ Version 1.010Laffected

Mitsubishi Electric FR Configurator2

  • unspecified to ≤ Version 1.22Yaffected

Mitsubishi Electric GX Works2

  • unspecified to ≤ Version 1.595Vaffected

Mitsubishi Electric GX Works3

  • unspecified to ≤ Version 1.063Raffected

Mitsubishi Electric MELSOFT iQ AppPortal

  • unspecified to ≤ Version 1.17Taffected

Mitsubishi Electric MELSOFT Navigator

  • unspecified to ≤ Version2.70Yaffected

Mitsubishi Electric MI Configurator

  • All Versionsaffected

Mitsubishi Electric MR Configurator2

  • unspecified to ≤ Version 1.110Qaffected

Mitsubishi Electric MT Works2

  • unspecified to ≤ Versions 1.156Naffected

Mitsubishi Electric MX Component

  • unspecified to ≤ Version 4.20Waffected

Mitsubishi Electric RT ToolBox3

  • unspecified to ≤ Versions 1.70Yaffected

Mitsubishi Electric MELSEC iQ-R Series Motion Module

  • unspecified to ≤ Versions 10affected

References