CVE-2020-14523
High
Description
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
SeverityHigh
CVSS8.3
Exploit probability—
ProductMitsubishielectric Cw Configurator
PublishedFeb 11, 2022
First seenFeb 11, 2022
Weakness typeCWE-22Path traversal
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric cw_configurator | v ≤ 1.010l | — |
| mitsubishielectric fr_configurator2 | v ≤ 1.22y | — |
| mitsubishielectric gx_works2 | v ≤ 1.595v | — |
| mitsubishielectric gx_works3 | v ≤ 1.063r | — |
| mitsubishielectric iu_configuration_tool | v ≤ 1.04 | — |
| mitsubishielectric iu_developer2 | v ≤ 1.08 | — |
| mitsubishielectric melsoft_iq_appportal | v ≤ 1.17t | — |
| mitsubishielectric melsoft_navigator | v ≤ 2.70y | — |
| mitsubishielectric mi_configurator | No range specified | — |
| mitsubishielectric mr_configurator2 | v ≤ 1.110q | — |
| mitsubishielectric mt_works2 | v ≤ 1.156n | — |
| mitsubishielectric mx_component | v ≤ 4.20w | — |
| mitsubishielectric rt_toolbox3 | v ≤ 1.70y | — |
| mitsubishielectric rd78g4_firmware | v ≤ 10 | — |
| mitsubishielectric rd78g8_firmware | v ≤ 10 | — |
| mitsubishielectric rd78g16_firmware | v ≤ 10 | — |
| mitsubishielectric rd78g32_firmware | v ≤ 10 | — |
| mitsubishielectric rd78g64_firmware | v ≤ 10 | — |
| mitsubishielectric rd78ghv_firmware | v ≤ 10 | — |
| mitsubishielectric rd78ghw_firmware | v ≤ 10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.