Lucene search

K
cvelistIcscertCVELIST:CVE-2020-14521
HistoryJul 30, 2020 - 12:00 a.m.

CVE-2020-14521 Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element

2020-07-3000:00:00
CWE-428
icscert
www.cve.org

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "C Controller Interface Module Utility",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 2.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CC-Link IE Control Network Data Collector",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1.00A"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CC-Link IE Field Network Data Collector",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1.00A"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CC-Link IE TSN Data Collector",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1.00A"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CPU Module Logging Configuration Tool",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.100E",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CW Configurator",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.010L",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Data Transfer",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 3.42U",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EZSocket",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 5.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FR Configurator SW3",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FR Configurator2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": " Version 1.26C",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT Designer2 Classic",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT Designer3 Version1 (GOT1000)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.241B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT Designer3 Version1 (GOT2000)",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.241B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT SoftGOT1000 Version3",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 3.200J",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT SoftGOT2000 Version1",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.241B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GX Developer",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 8.504A",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GX LogViewer",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.100E",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GX Works2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.601B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GX Works3",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.063R",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M_CommDTM-IO-Link",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.03D",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELFA-Works",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 4.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC WinCPU Setting Utility",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSOFT Complete Clean Up Tool",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.06G",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSOFT EM Software Development Kit",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.015R",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSOFT iQ AppPortal",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.17T",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSOFT Navigator",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 2.74C",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MI Configurator",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.004E",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Motion Control Setting",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.005F",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Motorizer",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.005F",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MR Configurator2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.125F",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MT Works2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.167Z",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MTConnect Data Collector",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.1.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MX Component",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 4.20W",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MX MESInterface",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.21X",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MX MESInterface-R",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.12N",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MX Sheet",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 2.15R",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Network Interface Board CC IE Control Utility",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.29F",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Network Interface Board CC IE Field Utility",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Versions 1.16S",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Network Interface Board CC-Link Ver.2 Utility",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.23Z",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Network Interface Board MNETH Utility",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 34L",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Position Board utility 2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 3.20",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PX Developer",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.53F",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RT ToolBox2",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 3.73B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RT ToolBox3",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.82L",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Setting/Monitoring tools for the C Controller module ",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "SW3PVC-CCPU Version 3.13P",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "SW4PVC-CCPU Version 4.12N",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SLMP Data Collector",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "lessThanOrEqual": "Version 1.04E",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

Related for CVELIST:CVE-2020-14521