CVE-2020-14521
High
Description
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
SeverityHigh
CVSS8.3
Exploit probability—
ProductMitsubishielectric C Controller Interface Module Utility
PublishedFeb 11, 2022
First seenFeb 11, 2022
Weakness typeCWE-428CWE-428
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric c_controller_interface_module_utility | No range specified | — |
| mitsubishielectric c_controller_module_setting_and_monitoring_tool | No range specified | — |
| mitsubishielectric cc-link_ie_control_network_data_collector | 1.00a | — |
| mitsubishielectric cc-link_ie_field_network_data_collector | 1.00a | — |
| mitsubishielectric cc-link_ie_tsn_data_collector | 1.00a | — |
| mitsubishielectric cpu_module_logging_configuration_tool | v ≤ 1.100e | — |
| mitsubishielectric cw_configurator | v ≤ 1.010l | — |
| mitsubishielectric data_transfer | v ≤ 3.42u | — |
| mitsubishielectric ezsocket | v ≤ 5.1 | — |
| mitsubishielectric fr_configurator_sw3 | No range specified | — |
| mitsubishielectric fr_configurator2 | No range specified | — |
| mitsubishielectric gt_designer2_classic | No range specified | — |
| mitsubishielectric gt_softgot1000 | 3.0 ≤ v ≤ 3.200j | — |
| mitsubishielectric gt_softgot2000 | 1.0 ≤ v ≤ 1.241b | — |
| mitsubishielectric gx_developer | v ≤ 8.504a | — |
| mitsubishielectric gx_logviewer | v ≤ 1.100e | — |
| mitsubishielectric gx_works2 | v ≤ 1.601b | — |
| mitsubishielectric gx_works3 | v ≤ 1.063r | — |
| mitsubishielectric m_commdtm-io-link | No range specified | — |
| mitsubishielectric melfa-works | v ≤ 4.4 | — |
| mitsubishielectric melsec_wincpu_setting_utility | No range specified | — |
| mitsubishielectric melsoft_complete_clean_up_tool | v ≤ 1.06g | — |
| mitsubishielectric melsoft_em_software_development_kit | No range specified | — |
| mitsubishielectric melsoft_iq_appportal | v ≤ 1.17t | — |
| mitsubishielectric melsoft_navigator | v ≤ 2.74c | — |
| mitsubishielectric mi_configurator | No range specified | — |
| mitsubishielectric motion_control_setting | v ≤ 1.005f | — |
| mitsubishielectric motorizer | v ≤ 1.005f | — |
| mitsubishielectric mr_configurator2 | v ≤ 1.125f | — |
| mitsubishielectric mt_works2 | v ≤ 1.167z | — |
| mitsubishielectric mtconnect_data_collector | v ≤ 1.1.4.0 | — |
| mitsubishielectric mx_component | v ≤ 4.20w | — |
| mitsubishielectric mx_mesinterface | v ≤ 1.21x | — |
| mitsubishielectric mx_mesinterface-r | v ≤ 1.12n | — |
| mitsubishielectric mx_sheet | v ≤ 2.15r | — |
| mitsubishielectric position_board_utility_2 | No range specified | — |
| mitsubishielectric px_developer | v ≤ 1.53f | — |
| mitsubishielectric rt_toolbox2 | v ≤ 3.73b | — |
| mitsubishielectric rt_toolbox3 | v ≤ 1.82l | — |
| mitsubishielectric setting\/monitoring_tools_for_the_c_controller_module | No range specified | — |
| mitsubishielectric slmp_data_collector | v ≤ 1.04e | — |
| mitsubishielectric gt_designer3 | v ≤ 1.241b | — |
| mitsubishielectric network_interface_board_cc-link_ver.2_utility_firmware | No range specified | — |
| mitsubishielectric network_interface_board_cc_ie_control_utility_firmware | No range specified | — |
| mitsubishielectric network_interface_board_cc_ie_field_utility_firmware | No range specified | — |
| mitsubishielectric network_interface_board_mneth_utility_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.