Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 | Third Party Advisory US Government Resource |
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-02-11 18:15
Updated : 2022-02-22 18:14
NVD link : CVE-2020-14521
Mitre link : CVE-2020-14521
JSON object : View
Products Affected
mitsubishielectric
- network_interface_board_cc_ie_control_utility
- cpu_module_logging_configuration_tool
- mtconnect_data_collector
- gx_logviewer
- network_interface_board_cc-link_ver.2_utility
- gx_works3
- mr_configurator2
- data_transfer
- cw_configurator
- got2000
- melsoft_navigator
- mx_mesinterface-r
- mt_works2
- gt_softgot1000
- cc-link_ie_control_network_data_collector
- gx_developer
- melsoft_em_software_development_kit
- cc-link_ie_tsn_data_collector
- mi_configurator
- fr_configurator2
- c_controller_module_setting_and_monitoring_tool
- setting\/monitoring_tools_for_the_c_controller_module
- px_developer
- slmp_data_collector
- mx_component
- network_interface_board_cc_ie_field_utility
- ezsocket
- gt_softgot2000
- motorizer
- mx_sheet
- got1000
- fr_configurator_sw3
- melsec_wincpu_setting_utility
- melsoft_iq_appportal
- c_controller_interface_module_utility
- network_interface_board_mneth_utility
- rt_toolbox3
- gt_designer2_classic
- melsoft_complete_clean_up_tool
- cc-link_ie_field_network_data_collector
- motion_control_setting
- mx_mesinterface
- gx_works2
- position_board_utility_2
- m_commdtm-io-link
- melfa-works
- rt_toolbox2
CWE
CWE-276
Incorrect Default Permissions