CVE-2020-14521

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Link	Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04	Third Party Advisory US Government Resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf	Vendor Advisory

Configuration 1

cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:melsec_wincpu_setting_utility:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:melsoft_em_software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:setting/monitoring_tools_for_the_c_controller_module:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:melsoft_iq_appportal:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:cc-link_ie_control_network_data_collector:1.00a:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:cc-link_ie_field_network_data_collector:1.00a:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:cc-link_ie_tsn_data_collector:1.00a:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:melsoft_complete_clean_up_tool:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:motion_control_setting:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:motorizer:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mtconnect_data_collector:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mx_mesinterface:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mx_mesinterface-r:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mx_sheet:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:c_controller_interface_module_utility:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:gt_designer2_classic:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:position_board_utility_2:*:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:slmp_data_collector:*:*:*:*:*:*:*:*

---

Published : 2022-02-11 06:15

Updated : 2022-03-10 04:42

---

NVD link : CVE-2020-14521

Mitre link : CVE-2020-14521

No products.

CWE-276

Incorrect Default Permissions