CVE-2020-14496

highPriorität · verfolgen · 39EPSS 0.009 · 59. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.87% (59th) EPSS
CVSS 7.5 · high
Is it mine?
127 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenCPU Module Logging Configuration Toolcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenCW Configuratorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenData Transfercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenEZSocketcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenFR Configurator2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenGT SoftGOT1000 Version3cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenGT SoftGOT2000 Version1 Bersionscisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenGX LogViewercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenGX Works2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenGX Works3cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMELFA-Workscisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMELSEC WinCPU Setting Utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMELSOFT FieldDeviceConfiguratorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMELSOFT Navigatorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMH11 SettingTool Version2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMI Configuratorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMR Configurator2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMT Works2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMX Componentcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenM_CommDTM-HARTcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenM_CommDTM-IO-Linkcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenMotorizercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenNetwork Interface Board CC IE Control utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenNetwork Interface Board MNETH utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenPX Developercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenRT ToolBox2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenRT ToolBox3cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • BehobenSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • MitigationCPU Module Logging Configuration Toolcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationCW Configuratorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationData Transfercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationEZSocketcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationFR Configurator2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGT SoftGOT1000 Version3cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGT SoftGOT2000 Version1 Bersionscisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX LogViewercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX Works2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX Works3cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELFA-Workscisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSEC WinCPU Setting Utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT FieldDeviceConfiguratorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT Navigatorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMH11 SettingTool Version2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMI Configuratorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMR Configurator2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMT Works2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMX Componentcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationM_CommDTM-HARTcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationM_CommDTM-IO-Linkcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMotorizercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC IE Control utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board MNETH utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationPX Developercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationRT ToolBox2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationRT ToolBox3cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.08.3highCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · CISA US
v3.18.3highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · ENISA EU
v3.18.3highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USAusnutzbarkeit 1.6 · Auswirkung 6
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-275USCWE-284US
05

betroffene Produkte (127)

Betroffene Produkte und Versionsbereiche.

20 von 127 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-20-212-02ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)2020-07-30icsa · cisa_csaf_otUS

    Younes Dragoni of Nozomi Networks, the Applied Risk research team, and Mashav Sapir of Claroty reported this vulnerability to Mitsubishi Electric.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2022-05-19geändert 2026-06-17
09

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan