ICSA-20-212-02

icsaUScisa_csaf_ot

ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)

view advisory published 2020-07-30

Younes Dragoni of Nozomi Networks, the Applied Risk research team, and Mashav Sapir of Claroty reported this vulnerability to Mitsubishi Electric.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-14496UScritical9.8—
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escal…
02

references

External citations — patches, advisories, analysis.

03

remediations (62)

  • MitigationCPU Module Logging Configuration Tool

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationCW Configurator

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationData Transfer

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationEZSocket

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationFR Configurator2

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGT SoftGOT1000 Version3

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGT SoftGOT2000 Version1 Bersions

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX LogViewer

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX Works2

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX Works3

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELFA-Works

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSEC WinCPU Setting Utility

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT EM Software Development Kit (EM Configurator)

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT FieldDeviceConfigurator

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT Navigator

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMH11 SettingTool Version2

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMI Configurator

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMR Configurator2

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMT Works2

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMX Component

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationM_CommDTM-HART

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationM_CommDTM-IO-Link

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMotorizer

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC IE Control utility

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC IE Field Utility

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC-Link Ver.2 Utility

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board MNETH utility

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationPX Developer

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationRT ToolBox2

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationRT ToolBox3

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • FixedCPU Module Logging Configuration Tool

    MT Works2, Version 1.160S or later

  • FixedCW Configurator

    MT Works2, Version 1.160S or later

  • FixedData Transfer

    MT Works2, Version 1.160S or later

  • FixedEZSocket

    MT Works2, Version 1.160S or later

  • FixedFR Configurator2

    MT Works2, Version 1.160S or later

  • FixedGT SoftGOT1000 Version3

    MT Works2, Version 1.160S or later

  • FixedGT SoftGOT2000 Version1 Bersions

    MT Works2, Version 1.160S or later

  • FixedGX LogViewer

    MT Works2, Version 1.160S or later

  • FixedGX Works2

    MT Works2, Version 1.160S or later

  • FixedGX Works3

    MT Works2, Version 1.160S or later

  • FixedMELFA-Works

    MT Works2, Version 1.160S or later

  • FixedMELSEC WinCPU Setting Utility

    MT Works2, Version 1.160S or later

  • FixedMELSOFT EM Software Development Kit (EM Configurator)

    MT Works2, Version 1.160S or later

  • FixedMELSOFT FieldDeviceConfigurator

    MT Works2, Version 1.160S or later

  • FixedMELSOFT Navigator

    MT Works2, Version 1.160S or later

  • FixedMH11 SettingTool Version2

    MT Works2, Version 1.160S or later

  • FixedMI Configurator

    MT Works2, Version 1.160S or later

  • FixedMR Configurator2

    MT Works2, Version 1.160S or later

  • FixedMT Works2

    MT Works2, Version 1.160S or later

  • FixedMX Component

    MT Works2, Version 1.160S or later

  • FixedM_CommDTM-HART

    MT Works2, Version 1.160S or later

  • FixedM_CommDTM-IO-Link

    MT Works2, Version 1.160S or later

  • FixedMotorizer

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board CC IE Control utility

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board CC IE Field Utility

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board CC-Link Ver.2 Utility

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board MNETH utility

    MT Works2, Version 1.160S or later

  • FixedPX Developer

    MT Works2, Version 1.160S or later

  • FixedRT ToolBox2

    MT Works2, Version 1.160S or later

  • FixedRT ToolBox3

    MT Works2, Version 1.160S or later

  • FixedSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)

    MT Works2, Version 1.160S or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan