CVE-2020-14523: Mitsubishi Electric Factory Automation Products Path Traversal
Mitsubishi Electric · CW Configurator
Affected: Mitsubishi Electric CW Configurator · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 83% of scored CVEs
DescriptionCVE.org
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Affected products12
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric · CW Configuratorup to and including Version 1.010L
- Mitsubishi Electric · FR Configurator2up to and including Version 1.22Y
- Mitsubishi Electric · GX Works2up to and including Version 1.595V
- Mitsubishi Electric · GX Works3up to and including Version 1.063R
- Mitsubishi Electric · MELSOFT iQ AppPortalup to and including Version 1.17T
- Mitsubishi Electric · MELSOFT Navigatorup to and including Version2.70Y
- Mitsubishi Electric · MI ConfiguratorAll Versions
- Mitsubishi Electric · MR Configurator2up to and including Version 1.110Q
- Mitsubishi Electric · MT Works2up to and including Versions 1.156N
- Mitsubishi Electric · MX Componentup to and including Version 4.20W
- Mitsubishi Electric · RT ToolBox3up to and including Versions 1.70Y
- Mitsubishi Electric · MELSEC iQ-R Series Motion Moduleup to and including Versions 10
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Mitsubishi Electric
- Published
- February 2022
CoverageNo articles yet
No CyberSIXT article names CVE-2020-14523 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.