Mr Configurator2

mr_configurator2

CVEs (17)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-26314 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.
CVE-2024-25088 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.
CVE-2024-25087 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.
CVE-2024-25086 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.
CVE-2024-22106 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS).
CVE-2024-22105 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error.
CVE-2024-22104 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).
CVE-2024-22103 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).
CVE-2024-22102 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error.
CVE-2023-51778 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).
CVE-2023-51777 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error.
CVE-2023-51776 2Jungo Mitsubishielectric 35Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+32 more Jun 17, 2026 Jul 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code.
CVE-2020-14496 1Mitsubishielectric 29Cpu Module Logging Configuration Tool Cw ConfiguratorData Transfer+26 more Jun 17, 2026 May 19, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious prog...Show more Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.Show less
CVE-2020-14523 1Mitsubishielectric 20Cw Configurator Fr Configurator2Gx Works2+17 more Jun 17, 2026 Feb 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
CVE-2020-14521 1Mitsubishielectric 46C Controller Interface Module Utility C Controller Module Setting And Monitoring ToolCc Link Ie Control Network Data Collector+43 more Jun 17, 2026 Feb 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, an...Show more Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.Show less
CVE-2020-5603 1Mitsubishielectric 20Cpu Module Logging Configuration Tool Cw ConfiguratorEm Configurator+17 more Jun 17, 2026 Jun 30, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Developm...Show more Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors.Show less
CVE-2020-5602 1Mitsubishielectric 20Cpu Module Logging Configuration Tool Cw ConfiguratorEm Configurator+17 more Jun 17, 2026 Jun 30, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier,...Show more Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.Show less