high8.3
CVE-2020-14521
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability.
Impact
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | C Controller Interface Module Utility | All versions |
| Mitsubishielectric | C Controller Module Setting And Monitoring Tool | All versions |
| Mitsubishielectric | Cc-Link Ie Control Network Data Collector | Version 1.00a |
| Mitsubishielectric | Cc-Link Ie Field Network Data Collector | Version 1.00a |
| Mitsubishielectric | Cc-Link Ie Tsn Data Collector | Version 1.00a |
| Mitsubishielectric | Cpu Module Logging Configuration Tool | through 1.100e |
| Mitsubishielectric | Cw Configurator | through 1.010l |
| Mitsubishielectric | Data Transfer | through 3.42u |
| Mitsubishielectric | Ezsocket | through 5.1 |
| Mitsubishielectric | Fr Configurator Sw3 | All versions |
| Mitsubishielectric | Fr Configurator2 | All versions |
| Mitsubishielectric | Gt Designer2 Classic | All versions |