CVE-2020-14521
Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
diversos productos de software de ingeniería de Mitsubishi Electric Factory Automation presentan una vulnerabilidad de ejecución de código malicioso. Un atacante malicioso podría usar esta vulnerabilidad para obtener información, modificar información y causar una condición de denegación de servicio
*Credits:
Mashav Sapir of Claroty reported this vulnerability to CISA
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-06-19 CVE Reserved
- 2022-02-11 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-276: Incorrect Default Permissions
- CWE-428: Unquoted Search Path or Element
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 | Government Resource |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt10 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt10" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt11 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt11" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt12 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt12" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt14 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt14" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt15 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt15" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt16 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt16" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt21 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt21" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt23 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt23" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt25 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt25" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer3 Search vendor "Mitsubishielectric" for product "Gt Designer3" | <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Designer3" and version " <= 1.241b" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Got1000 Series Gt27 Search vendor "Mitsubishielectric" for product "Got1000 Series Gt27" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc-link Ver.2 Utility Firmware Search vendor "Mitsubishielectric" for product "Network Interface Board Cc-link Ver.2 Utility Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc-link Ver.2 Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Cc-link Ver.2 Utility" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc Ie Control Utility Firmware Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Control Utility Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc Ie Control Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Control Utility" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc Ie Field Utility Firmware Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Field Utility Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Cc Ie Field Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Cc Ie Field Utility" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Mneth Utility Firmware Search vendor "Mitsubishielectric" for product "Network Interface Board Mneth Utility Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Network Interface Board Mneth Utility Search vendor "Mitsubishielectric" for product "Network Interface Board Mneth Utility" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | C Controller Interface Module Utility Search vendor "Mitsubishielectric" for product "C Controller Interface Module Utility" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | C Controller Module Setting And Monitoring Tool Search vendor "Mitsubishielectric" for product "C Controller Module Setting And Monitoring Tool" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cc-link Ie Control Network Data Collector Search vendor "Mitsubishielectric" for product "Cc-link Ie Control Network Data Collector" | 1.00a Search vendor "Mitsubishielectric" for product "Cc-link Ie Control Network Data Collector" and version "1.00a" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cc-link Ie Field Network Data Collector Search vendor "Mitsubishielectric" for product "Cc-link Ie Field Network Data Collector" | 1.00a Search vendor "Mitsubishielectric" for product "Cc-link Ie Field Network Data Collector" and version "1.00a" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cc-link Ie Tsn Data Collector Search vendor "Mitsubishielectric" for product "Cc-link Ie Tsn Data Collector" | 1.00a Search vendor "Mitsubishielectric" for product "Cc-link Ie Tsn Data Collector" and version "1.00a" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cpu Module Logging Configuration Tool Search vendor "Mitsubishielectric" for product "Cpu Module Logging Configuration Tool" | <= 1.100e Search vendor "Mitsubishielectric" for product "Cpu Module Logging Configuration Tool" and version " <= 1.100e" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cw Configurator Search vendor "Mitsubishielectric" for product "Cw Configurator" | <= 1.010l Search vendor "Mitsubishielectric" for product "Cw Configurator" and version " <= 1.010l" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Data Transfer Search vendor "Mitsubishielectric" for product "Data Transfer" | <= 3.42u Search vendor "Mitsubishielectric" for product "Data Transfer" and version " <= 3.42u" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Ezsocket Search vendor "Mitsubishielectric" for product "Ezsocket" | <= 5.1 Search vendor "Mitsubishielectric" for product "Ezsocket" and version " <= 5.1" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fr Configurator Sw3 Search vendor "Mitsubishielectric" for product "Fr Configurator Sw3" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fr Configurator2 Search vendor "Mitsubishielectric" for product "Fr Configurator2" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Designer2 Classic Search vendor "Mitsubishielectric" for product "Gt Designer2 Classic" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot1000 Search vendor "Mitsubishielectric" for product "Gt Softgot1000" | >= 3.0 <= 3.200j Search vendor "Mitsubishielectric" for product "Gt Softgot1000" and version " >= 3.0 <= 3.200j" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot2000 Search vendor "Mitsubishielectric" for product "Gt Softgot2000" | >= 1.0 <= 1.241b Search vendor "Mitsubishielectric" for product "Gt Softgot2000" and version " >= 1.0 <= 1.241b" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Developer Search vendor "Mitsubishielectric" for product "Gx Developer" | <= 8.504a Search vendor "Mitsubishielectric" for product "Gx Developer" and version " <= 8.504a" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Logviewer Search vendor "Mitsubishielectric" for product "Gx Logviewer" | <= 1.100e Search vendor "Mitsubishielectric" for product "Gx Logviewer" and version " <= 1.100e" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Works2 Search vendor "Mitsubishielectric" for product "Gx Works2" | <= 1.601b Search vendor "Mitsubishielectric" for product "Gx Works2" and version " <= 1.601b" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Works3 Search vendor "Mitsubishielectric" for product "Gx Works3" | <= 1.063r Search vendor "Mitsubishielectric" for product "Gx Works3" and version " <= 1.063r" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | M Commdtm-io-link Search vendor "Mitsubishielectric" for product "M Commdtm-io-link" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melfa-works Search vendor "Mitsubishielectric" for product "Melfa-works" | <= 4.4 Search vendor "Mitsubishielectric" for product "Melfa-works" and version " <= 4.4" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsec Wincpu Setting Utility Search vendor "Mitsubishielectric" for product "Melsec Wincpu Setting Utility" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsoft Complete Clean Up Tool Search vendor "Mitsubishielectric" for product "Melsoft Complete Clean Up Tool" | <= 1.06g Search vendor "Mitsubishielectric" for product "Melsoft Complete Clean Up Tool" and version " <= 1.06g" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsoft Em Software Development Kit Search vendor "Mitsubishielectric" for product "Melsoft Em Software Development Kit" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsoft Iq Appportal Search vendor "Mitsubishielectric" for product "Melsoft Iq Appportal" | <= 1.17t Search vendor "Mitsubishielectric" for product "Melsoft Iq Appportal" and version " <= 1.17t" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Melsoft Navigator Search vendor "Mitsubishielectric" for product "Melsoft Navigator" | <= 2.74c Search vendor "Mitsubishielectric" for product "Melsoft Navigator" and version " <= 2.74c" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mi Configurator Search vendor "Mitsubishielectric" for product "Mi Configurator" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Motion Control Setting Search vendor "Mitsubishielectric" for product "Motion Control Setting" | <= 1.005f Search vendor "Mitsubishielectric" for product "Motion Control Setting" and version " <= 1.005f" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Motorizer Search vendor "Mitsubishielectric" for product "Motorizer" | <= 1.005f Search vendor "Mitsubishielectric" for product "Motorizer" and version " <= 1.005f" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mr Configurator2 Search vendor "Mitsubishielectric" for product "Mr Configurator2" | <= 1.125f Search vendor "Mitsubishielectric" for product "Mr Configurator2" and version " <= 1.125f" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mt Works2 Search vendor "Mitsubishielectric" for product "Mt Works2" | <= 1.167z Search vendor "Mitsubishielectric" for product "Mt Works2" and version " <= 1.167z" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mtconnect Data Collector Search vendor "Mitsubishielectric" for product "Mtconnect Data Collector" | <= 1.1.4.0 Search vendor "Mitsubishielectric" for product "Mtconnect Data Collector" and version " <= 1.1.4.0" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Component Search vendor "Mitsubishielectric" for product "Mx Component" | <= 4.20w Search vendor "Mitsubishielectric" for product "Mx Component" and version " <= 4.20w" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Mesinterface Search vendor "Mitsubishielectric" for product "Mx Mesinterface" | <= 1.21x Search vendor "Mitsubishielectric" for product "Mx Mesinterface" and version " <= 1.21x" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Mesinterface-r Search vendor "Mitsubishielectric" for product "Mx Mesinterface-r" | <= 1.12n Search vendor "Mitsubishielectric" for product "Mx Mesinterface-r" and version " <= 1.12n" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Sheet Search vendor "Mitsubishielectric" for product "Mx Sheet" | <= 2.15r Search vendor "Mitsubishielectric" for product "Mx Sheet" and version " <= 2.15r" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Position Board Utility 2 Search vendor "Mitsubishielectric" for product "Position Board Utility 2" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Px Developer Search vendor "Mitsubishielectric" for product "Px Developer" | <= 1.53f Search vendor "Mitsubishielectric" for product "Px Developer" and version " <= 1.53f" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rt Toolbox2 Search vendor "Mitsubishielectric" for product "Rt Toolbox2" | <= 3.73b Search vendor "Mitsubishielectric" for product "Rt Toolbox2" and version " <= 3.73b" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rt Toolbox3 Search vendor "Mitsubishielectric" for product "Rt Toolbox3" | <= 1.82l Search vendor "Mitsubishielectric" for product "Rt Toolbox3" and version " <= 1.82l" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Setting\/monitoring Tools For The C Controller Module Search vendor "Mitsubishielectric" for product "Setting\/monitoring Tools For The C Controller Module" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Slmp Data Collector Search vendor "Mitsubishielectric" for product "Slmp Data Collector" | <= 1.04e Search vendor "Mitsubishielectric" for product "Slmp Data Collector" and version " <= 1.04e" | - |
Affected
| ||||||