CVE-2020-14521: Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
Mitsubishi Electric · C Controller Interface Module Utility
Vendor fix available · Affected: Mitsubishi Electric C Controller Interface Module Utility · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 70% of scored CVEs
DescriptionCVE.org
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric · C Controller Interface Module Utilityup to and including Version 2.00
- Mitsubishi Electric · CC-Link IE Control Network Data CollectorVersion 1.00A
- Mitsubishi Electric · CC-Link IE Field Network Data CollectorVersion 1.00A
- Mitsubishi Electric · CC-Link IE TSN Data CollectorVersion 1.00A
- Mitsubishi Electric · CPU Module Logging Configuration Toolup to and including Version 1.100E
- Mitsubishi Electric · CW Configuratorup to and including Version 1.010L
- Mitsubishi Electric · Data Transferup to and including Version 3.42U
- Mitsubishi Electric · EZSocketup to and including Version 5.1
- Mitsubishi Electric · FR Configurator SW3All Versions
- Mitsubishi Electric · FR Configurator2up to and including Version 1.26C
- Mitsubishi Electric · GT Designer2 ClassicAll Versions
- Mitsubishi Electric · GT Designer3 Version1 (GOT1000)up to and including Version 1.241B
- Mitsubishi Electric · GT Designer3 Version1 (GOT2000)up to and including Version 1.241B
- Mitsubishi Electric · GT SoftGOT1000 Version3up to and including Version 3.200J
- Mitsubishi Electric · GT SoftGOT2000 Version1up to and including Version 1.241B
- Mitsubishi Electric · GX Developerup to and including Version 8.504A
- Mitsubishi Electric · GX LogViewerup to and including Version 1.100E
- Mitsubishi Electric · GX Works2up to and including Version 1.601B
- Mitsubishi Electric · GX Works3up to and including Version 1.063R
- Mitsubishi Electric · M_CommDTM-IO-Linkup to and including Version 1.03D
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Mitsubishi Electric
- Published
- February 2022
CoverageNo articles yet
No CyberSIXT article names CVE-2020-14521 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.