← Back

CVE-2020-14523

nvd nist
Published: Feb 11, 2022Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

Affected (20)

Mitsubishielectric
20 products
Cw Configurator
Fr Configurator2
Gx Works2
Gx Works3
Iu Configuration Tool
Iu Developer2
Melsoft Iq Appportal
Melsoft Navigator
Mi Configurator
Mr Configurator2
Mt Works2
Mx Component
Rt Toolbox3
Rd78g4 Firmware
Rd78g8 Firmware
Rd78g16 Firmware
Rd78g32 Firmware
Rd78g64 Firmware
Rd78ghv Firmware
Rd78ghw Firmware
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Cw Configurator
Up to 1.010l
Fr Configurator2
Up to 1.22y
Gx Works2
Up to 1.595v
Gx Works3
Up to 1.063r
Iu Configuration Tool
Up to 1.04
Iu Developer2
Up to 1.08
Melsoft Iq Appportal
Up to 1.17t
Melsoft Navigator
Up to 2.70y
Mi Configurator
All versions
Mr Configurator2
Up to 1.110q
Mt Works2
Up to 1.156n
Mx Component
Up to 4.20w
Rt Toolbox3
Up to 1.70y
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78g4 Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78g4
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78g8 Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78g8
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78g16 Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78g16
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78g32 Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78g32
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78g64 Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78g64
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78ghv Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78ghv
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rd78ghw Firmware
Up to 10
Running on/withPlatform Versions
Mitsubishielectric
Rd78ghw
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (6)

Source: ics-cert@hq.dhs.gov
Third Party Advisory
Source: ics-cert@hq.dhs.gov
PatchThird Party AdvisoryUS Government Resource
Source: ics-cert@hq.dhs.gov
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.