CVE-2020-14496: Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
Mitsubishi Electric · CPU Module Logging Configuration Tool
Affected: Mitsubishi Electric CPU Module Logging Configuration Tool · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 59% of scored CVEs
DescriptionCVE.org
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric · CPU Module Logging Configuration Toolfrom All up to and including 1.100E
- Mitsubishi Electric · CW Configuratorfrom All up to and including 1.010L
- Mitsubishi Electric · Data Transferfrom All up to and including 3.40S
- Mitsubishi Electric · EZSocketfrom All up to and including 4.5
- Mitsubishi Electric · FR Configurator2from All up to and including 1.22Y
- Mitsubishi Electric · GT Designer3 Version1 (GOT2000)from All up to and including 1.235V
- Mitsubishi Electric · GT SoftGOT1000 Version3from All up to and including 3.200J
- Mitsubishi Electric · GT SoftGOT1000 Version3All
- Mitsubishi Electric · GT SoftGOT2000 Version1from All up to and including 1.235V
- Mitsubishi Electric · GX LogViewerfrom All up to and including 1.100E
- Mitsubishi Electric · GX Works2from All up to and including 1.592S
- Mitsubishi Electric · GX Works3from All up to and including 1.063R
- Mitsubishi Electric · M_CommDTM-HARTAll 1.00A
- Mitsubishi Electric · M_CommDTM-IO-LinkAll
- Mitsubishi Electric · MELFA-Worksfrom All up to and including 4.3
- Mitsubishi Electric · MELSEC WinCPU Setting UtilityAll
- Mitsubishi Electric · MELSOFT EM Software Development Kit (EM Configurator)from All up to and including 1.010L
- Mitsubishi Electric · MELSOFT FieldDeviceConfiguratorfrom All up to and including 1.03D
- Mitsubishi Electric · MELSOFT Navigatorfrom All up to and including 2.62Q
- Mitsubishi Electric · MH11 SettingTool Version2from All up to and including 2.002C
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Mitsubishi Electric
- Published
- May 2022
CoverageNo articles yet
No CyberSIXT article names CVE-2020-14496 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.