Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Mitsubishi Electric CPU Module Logging Configuration Tool
through 1.100E
- Mitsubishi Electric CW Configurator
through 1.010L
- Mitsubishi Electric Data Transfer
through 3.40S
- Mitsubishi Electric EZSocket
through 4.5
- Mitsubishi Electric FR Configurator2
through 1.22Y
- Mitsubishi Electric GT Designer3 Version1 (GOT2000)
through 1.235V
- Mitsubishi Electric GT SoftGOT1000 Version3
through 3.200J
- Mitsubishi Electric GT SoftGOT1000 Version3
All versions
- Mitsubishi Electric GT SoftGOT2000 Version1
through 1.235V
- Mitsubishi Electric GX LogViewer
through 1.100E
- Mitsubishi Electric GX Works2
through 1.592S
- Mitsubishi Electric GX Works3
through 1.063R
- Mitsubishi Electric M_CommDTM-HART
All 1.00A
- Mitsubishi Electric M_CommDTM-IO-Link
All versions
- Mitsubishi Electric MELFA-Works
through 4.3
- Mitsubishi Electric MELSEC WinCPU Setting Utility
All versions
- Mitsubishi Electric MELSOFT EM Software Development Kit (EM Configurator)
through 1.010L
- Mitsubishi Electric MELSOFT FieldDeviceConfigurator
through 1.03D
- Mitsubishi Electric MELSOFT Navigator
through 2.62Q
- Mitsubishi Electric MH11 SettingTool Version2
through 2.002C
- Mitsubishi Electric MI Configurator
All versions
- Mitsubishi Electric Motorizer
through 1.005F
- Mitsubishi Electric MR Configurator2
through 1.105K
- Mitsubishi Electric MT Works2
through 1.156N
- Mitsubishi Electric MX Component
through 4.19V
- Mitsubishi Electric Network Interface Board CC IE Control utility
All versions
- Mitsubishi Electric Network Interface Board CC IE Field Utility
All versions
- Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility
All versions
- Mitsubishi Electric Network Interface Board MNETH utility
All versions
- Mitsubishi Electric PX Developer
through 1.52E
- Mitsubishi Electric RT ToolBox2
through 3.72A
- Mitsubishi Electric RT ToolBox3
through 1.70Y
- Mitsubishi Electric Setting/monitoring tools for the C Controller module
All versions