Skip to main content
← All vulnerabilities
CVE-2020-14521

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Mitsubishi Electric C Controller Interface Module Utility

    through Version 2.00

  • Mitsubishi Electric CC-Link IE Control Network Data Collector

    Version 1.00A

  • Mitsubishi Electric CC-Link IE Field Network Data Collector

    Version 1.00A

  • Mitsubishi Electric CC-Link IE TSN Data Collector

    Version 1.00A

  • Mitsubishi Electric CPU Module Logging Configuration Tool

    through Version 1.100E

  • Mitsubishi Electric CW Configurator

    through Version 1.010L

  • Mitsubishi Electric Data Transfer

    through Version 3.42U

  • Mitsubishi Electric EZSocket

    through Version 5.1

  • Mitsubishi Electric FR Configurator SW3

    All versions

  • Mitsubishi Electric FR Configurator2

    through Version 1.26C

  • Mitsubishi Electric GT Designer2 Classic

    All versions

  • Mitsubishi Electric GT Designer3 Version1 (GOT1000)

    through Version 1.241B

  • Mitsubishi Electric GT Designer3 Version1 (GOT2000)

    through Version 1.241B

  • Mitsubishi Electric GT SoftGOT1000 Version3

    through Version 3.200J

  • Mitsubishi Electric GT SoftGOT2000 Version1

    through Version 1.241B

  • Mitsubishi Electric GX Developer

    through Version 8.504A

  • Mitsubishi Electric GX LogViewer

    through Version 1.100E

  • Mitsubishi Electric GX Works2

    through Version 1.601B

  • Mitsubishi Electric GX Works3

    through Version 1.063R

  • Mitsubishi Electric M_CommDTM-IO-Link

    through Version 1.03D

  • Mitsubishi Electric MELFA-Works

    through Version 4.4

  • Mitsubishi Electric MELSEC WinCPU Setting Utility

    All versions

  • Mitsubishi Electric MELSOFT Complete Clean Up Tool

    through Version 1.06G

  • Mitsubishi Electric MELSOFT EM Software Development Kit

    through Version 1.015R

  • Mitsubishi Electric MELSOFT iQ AppPortal

    through Version 1.17T

  • Mitsubishi Electric MELSOFT Navigator

    through Version 2.74C

  • Mitsubishi Electric MI Configurator

    through Version 1.004E

  • Mitsubishi Electric Motion Control Setting

    through Version 1.005F

  • Mitsubishi Electric Motorizer

    through Version 1.005F

  • Mitsubishi Electric MR Configurator2

    through Version 1.125F

  • Mitsubishi Electric MT Works2

    through Version 1.167Z

  • Mitsubishi Electric MTConnect Data Collector

    through Version 1.1.4.0

  • Mitsubishi Electric MX Component

    through Version 4.20W

  • Mitsubishi Electric MX MESInterface

    through Version 1.21X

  • Mitsubishi Electric MX MESInterface-R

    through Version 1.12N

  • Mitsubishi Electric MX Sheet

    through Version 2.15R

  • Mitsubishi Electric Network Interface Board CC IE Control Utility

    through Version 1.29F

  • Mitsubishi Electric Network Interface Board CC IE Field Utility

    through Versions 1.16S

  • Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility

    through Version 1.23Z

  • Mitsubishi Electric Network Interface Board MNETH Utility

    through Version 34L

  • Mitsubishi Electric Position Board utility 2

    through Version 3.20

  • Mitsubishi Electric PX Developer

    through Version 1.53F

  • Mitsubishi Electric RT ToolBox2

    through Version 3.73B

  • Mitsubishi Electric RT ToolBox3

    through Version 1.82L

  • Mitsubishi Electric Setting/Monitoring tools for the C Controller module

    through SW3PVC-CCPU Version 3.13P; through SW4PVC-CCPU Version 4.12N

  • Mitsubishi Electric SLMP Data Collector

    through Version 1.04E

References 2

cisa.gov

mitsubishielectric.com