8.3
High
CVE-2020-14496 Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software…
Description
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPU Module Logging Configuration Tool 1.100 | earliest → 1.100E | No fix stated |
| CW Configurator 1.010 | earliest → 1.010L | No fix stated |
| Data Transfer 3.40 | earliest → 3.40S | No fix stated |
| EZSocket 4.5 | earliest → 4.5 | No fix stated |
| FR Configurator2 1.22 | earliest → 1.22Y | No fix stated |
| GT Designer3 Version1 (GOT2000) 1.235 | earliest → 1.235V | No fix stated |
| GT SoftGOT1000 Version3 | Versions not published | |
| GT SoftGOT2000 Version1 1.235 | earliest → 1.235V | No fix stated |
| GX LogViewer 1.100 | earliest → 1.100E | No fix stated |
Show the 23 other branches Hide the 23 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| GX Works2 1.592 | earliest → 1.592S | No fix stated |
| GX Works3 1.063 | earliest → 1.063R | No fix stated |
| M_CommDTM-HART | Versions not published | |
| M_CommDTM-IO-Link | Versions not published | |
| MELFA-Works 4.3 | earliest → 4.3 | No fix stated |
| MELSEC WinCPU Setting Utility | Versions not published | |
| MELSOFT EM Software Development Kit (EM Configurator) 1.010 | earliest → 1.010L | No fix stated |
| MELSOFT FieldDeviceConfigurator 1.03 | earliest → 1.03D | No fix stated |
| MELSOFT Navigator 2.62 | earliest → 2.62Q | No fix stated |
| MH11 SettingTool Version2 2.002 | earliest → 2.002C | No fix stated |
| MI Configurator | Versions not published | |
| Motorizer 1.005 | earliest → 1.005F | No fix stated |
| MR Configurator2 1.105 | earliest → 1.105K | No fix stated |
| MT Works2 1.156 | earliest → 1.156N | No fix stated |
| MX Component 4.19 | earliest → 4.19V | No fix stated |
| Network Interface Board CC IE Control utility | Versions not published | |
| Network Interface Board CC IE Field Utility | Versions not published | |
| Network Interface Board CC-Link Ver.2 Utility | Versions not published | |
| Network Interface Board MNETH utility | Versions not published | |
| PX Developer 1.52 | earliest → 1.52E | No fix stated |
| RT ToolBox2 3.72 | earliest → 3.72A | No fix stated |
| RT ToolBox3 1.70 | earliest → 1.70Y | No fix stated |
| Setting/monitoring tools for the C Controller module | Versions not published |