CVE-2020-14496

highpriority · track · 39EPSS 0.009 · 59 %ileEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.87% (59th) EPSS
CVSS 7.5 · high
Is it mine?
127 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-27

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedCPU Module Logging Configuration Toolcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedCW Configuratorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedData Transfercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedEZSocketcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedFR Configurator2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedGT SoftGOT1000 Version3cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedGT SoftGOT2000 Version1 Bersionscisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedGX LogViewercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedGX Works2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedGX Works3cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMELFA-Workscisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMELSEC WinCPU Setting Utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMELSOFT FieldDeviceConfiguratorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMELSOFT Navigatorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMH11 SettingTool Version2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMI Configuratorcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMR Configurator2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMT Works2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMX Componentcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedM_CommDTM-HARTcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedM_CommDTM-IO-Linkcisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedMotorizercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board CC IE Control utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedNetwork Interface Board MNETH utilitycisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedPX Developercisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedRT ToolBox2cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedRT ToolBox3cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • FixedSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot

    MT Works2, Version 1.160S or later

  • MitigationCPU Module Logging Configuration Toolcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationCW Configuratorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationData Transfercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationEZSocketcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationFR Configurator2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGT SoftGOT1000 Version3cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGT SoftGOT2000 Version1 Bersionscisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX LogViewercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX Works2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationGX Works3cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELFA-Workscisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSEC WinCPU Setting Utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT EM Software Development Kit (EM Configurator)cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT FieldDeviceConfiguratorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMELSOFT Navigatorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMH11 SettingTool Version2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMI Configuratorcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMR Configurator2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMT Works2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMX Componentcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationM_CommDTM-HARTcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationM_CommDTM-IO-Linkcisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationMotorizercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC IE Control utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC IE Field Utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationNetwork Interface Board MNETH utilitycisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationPX Developercisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationRT ToolBox2cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationRT ToolBox3cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

  • MitigationSetting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot

    CPU Module Logging Configuration Tool, Version 1.106K or later

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.08.3highCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · CISA US
v3.18.3highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · ENISA EU
v3.18.3highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USexploitability 1.6 · impact 6
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-275USCWE-284US
05

affected products (127)

Products and version ranges known to be affected.

showing 20 of 127
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-20-212-02ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)2020-07-30icsa · cisa_csaf_otUS

    Younes Dragoni of Nozomi Networks, the Applied Risk research team, and Mashav Sapir of Claroty reported this vulnerability to Mitsubishi Electric.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
published 2022-05-19modified 2026-06-17
09

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan