high8.3
CVE-2020-14523
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Impact
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Cw Configurator | through 1.010l |
| Mitsubishielectric | Fr Configurator2 | through 1.22y |
| Mitsubishielectric | Gx Works2 | through 1.595v |
| Mitsubishielectric | Gx Works3 | through 1.063r |
| Mitsubishielectric | Iu Configuration Tool | through 1.04 |
| Mitsubishielectric | Iu Developer2 | through 1.08 |
| Mitsubishielectric | Melsoft Iq Appportal | through 1.17t |
| Mitsubishielectric | Melsoft Navigator | through 2.70y |
| Mitsubishielectric | Mi Configurator | All versions |
| Mitsubishielectric | Mr Configurator2 | through 1.110q |
| Mitsubishielectric | Mt Works2 | through 1.156n |
| Mitsubishielectric | Mx Component | through 4.20w |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/vu/JVNVU90224831/
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-008_en.pdf
- https://jvn.jp/vu/JVNVU90224831/
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-008_en.pdf