CVE-2020-14496
Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Una explotación con éxito de esta vulnerabilidad para múltiples Productos Mitsubishi Electric Factory Automation Engineering Software de varias versiones podría permitir a un atacante escalar privilegios y ejecutar programas maliciosos, lo que podría causar una condición de denegación de servicio, y permitir que la información sea divulgada, manipulada y/o destruida
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-06-19 CVE Reserved
- 2022-05-19 CVE Published
- 2023-12-10 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-275: Permission Issues
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cpu Module Logging Configuration Tool Search vendor "Mitsubishielectric" for product "Cpu Module Logging Configuration Tool" | < 1.106k Search vendor "Mitsubishielectric" for product "Cpu Module Logging Configuration Tool" and version " < 1.106k" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cw Configurator Search vendor "Mitsubishielectric" for product "Cw Configurator" | < 1.011m Search vendor "Mitsubishielectric" for product "Cw Configurator" and version " < 1.011m" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Data Transfer Search vendor "Mitsubishielectric" for product "Data Transfer" | < 3.41t Search vendor "Mitsubishielectric" for product "Data Transfer" and version " < 3.41t" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Em Configurator Search vendor "Mitsubishielectric" for product "Em Configurator" | < 1.015r Search vendor "Mitsubishielectric" for product "Em Configurator" and version " < 1.015r" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Ezsocket Search vendor "Mitsubishielectric" for product "Ezsocket" | < 4.6 Search vendor "Mitsubishielectric" for product "Ezsocket" and version " < 4.6" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fr Configurator2 Search vendor "Mitsubishielectric" for product "Fr Configurator2" | < 1.23z Search vendor "Mitsubishielectric" for product "Fr Configurator2" and version " < 1.23z" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | < 1.236w Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " < 1.236w" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot1000 Search vendor "Mitsubishielectric" for product "Gt Softgot1000" | < 3.245f Search vendor "Mitsubishielectric" for product "Gt Softgot1000" and version " < 3.245f" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot2000 Search vendor "Mitsubishielectric" for product "Gt Softgot2000" | < 1.236w Search vendor "Mitsubishielectric" for product "Gt Softgot2000" and version " < 1.236w" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Logviewer Search vendor "Mitsubishielectric" for product "Gx Logviewer" | < 1.106k Search vendor "Mitsubishielectric" for product "Gx Logviewer" and version " < 1.106k" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Works2 Search vendor "Mitsubishielectric" for product "Gx Works2" | < 1.595v Search vendor "Mitsubishielectric" for product "Gx Works2" and version " < 1.595v" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Works3 Search vendor "Mitsubishielectric" for product "Gx Works3" | < 1.065t Search vendor "Mitsubishielectric" for product "Gx Works3" and version " < 1.065t" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | M Commdtm-hart Search vendor "Mitsubishielectric" for product "M Commdtm-hart" | < 1.01b Search vendor "Mitsubishielectric" for product "M Commdtm-hart" and version " < 1.01b" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | M Commdtm-io-link Search vendor "Mitsubishielectric" for product "M Commdtm-io-link" | < 1.04e Search vendor "Mitsubishielectric" for product "M Commdtm-io-link" and version " < 1.04e" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melfa-works Search vendor "Mitsubishielectric" for product "Melfa-works" | < 4.4 Search vendor "Mitsubishielectric" for product "Melfa-works" and version " < 4.4" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsoft Fielddeviceconfigurator Search vendor "Mitsubishielectric" for product "Melsoft Fielddeviceconfigurator" | < 1.04e Search vendor "Mitsubishielectric" for product "Melsoft Fielddeviceconfigurator" and version " < 1.04e" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsoft Navigator Search vendor "Mitsubishielectric" for product "Melsoft Navigator" | < 2.70y Search vendor "Mitsubishielectric" for product "Melsoft Navigator" and version " < 2.70y" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mh11 Settingtool Version2 Search vendor "Mitsubishielectric" for product "Mh11 Settingtool Version2" | < 2.003d Search vendor "Mitsubishielectric" for product "Mh11 Settingtool Version2" and version " < 2.003d" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Motorizer Search vendor "Mitsubishielectric" for product "Motorizer" | < 1.010l Search vendor "Mitsubishielectric" for product "Motorizer" and version " < 1.010l" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mr Configurator2 Search vendor "Mitsubishielectric" for product "Mr Configurator2" | < 1.106l Search vendor "Mitsubishielectric" for product "Mr Configurator2" and version " < 1.106l" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mt Works2 Search vendor "Mitsubishielectric" for product "Mt Works2" | < 1.160s Search vendor "Mitsubishielectric" for product "Mt Works2" and version " < 1.160s" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Component Search vendor "Mitsubishielectric" for product "Mx Component" | < 4.20w Search vendor "Mitsubishielectric" for product "Mx Component" and version " < 4.20w" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc-link Ver.2 Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Cc-link Ver.2 Utility" | < 1.24a Search vendor "Mitsubishielectric" for product "Network Interface Board Cc-link Ver.2 Utility" and version " < 1.24a" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc Ie Control Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Control Utility" | < 1.30g Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Control Utility" and version " < 1.30g" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc Ie Field Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Field Utility" | < 1.17t Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Field Utility" and version " < 1.17t" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Mneth Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Mneth Utility" | < 35m Search vendor "Mitsubishielectric" for product "Network Interface Board Mneth Utility" and version " < 35m" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Px Developer Search vendor "Mitsubishielectric" for product "Px Developer" | < 1.53f Search vendor "Mitsubishielectric" for product "Px Developer" and version " < 1.53f" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rt Toolbox2 Search vendor "Mitsubishielectric" for product "Rt Toolbox2" | < 3.73b Search vendor "Mitsubishielectric" for product "Rt Toolbox2" and version " < 3.73b" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rt Toolbox3 Search vendor "Mitsubishielectric" for product "Rt Toolbox3" | < 1.80j Search vendor "Mitsubishielectric" for product "Rt Toolbox3" and version " < 1.80j" | - |
Affected
| ||||||