CVE-2020-14521
highpriority · track · 39OT risk · elevatedEPSS 0.013 · 70 %ileEUUSEPSS · scored 2026-10-26
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedMitsubishi Electric C Controller Interface Module utilitycisa_csaf_ot
Mitsubishi Electric is releasing fixed version 2.10 or later for C Controller Interface Module utility. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric CC-Link IE Control Network Data Collectorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.01B or later for CC-Link IE Control Network Data Collector. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric CC-Link IE Field Network Data Collectorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.01B or later for CC-Link IE Field Network Data Collector. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric CC-Link IE TSN Data Collectorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.01B or later for CC-Link IE TSN Data Collector. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric CPU Module Logging Configuration Toolcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.106K or later for CPU Module Logging Configuration Tool. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric CW Configuratorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.011M or later for CW Configurator. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Data Transfercisa_csaf_ot
Mitsubishi Electric is releasing fixed version 3.43V or later for Data Transfer. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric EZSocketcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 5.2 or later for EZSocket. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric FR Configurator2cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.27D or later for FR Configurator2. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GT Designer3 Version1 (GOT1000)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.245F or later for GT Designer3 Version1 (GOT1000). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GT Designer3 Version1 (GOT2000)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.245F or later for GT Designer3 Version1 (GOT2000). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GT SoftGOT1000 Version3cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 3.245F or later for GT SoftGOT1000 Version3. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GT SoftGOT2000 Version1cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.245F or later for GT SoftGOT2000 Version1. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GX Developercisa_csaf_ot
Mitsubishi Electric is releasing fixed version 8.505B or later for GX Developer. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GX LogViewercisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.106K or later for GX LogViewer. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GX Works2cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.605F or later for GX Works2. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric GX Works3cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.065T or later for GX Works3. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MELFA-Workscisa_csaf_ot
Mitsubishi Electric is releasing fixed version 4.5 or later for MELFA-Works. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MELSOFT Complete Clean Up Toolcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.07H or later for MELSOFT Complete Clean Up Tool. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MELSOFT EM Software Development Kitcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.020W or later for MELSOFT EM Software Development Kit. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MELSOFT Navigatorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 2.78G or later for MELSOFT Navigator. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MELSOFT iQ AppPortalcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.20W or later for MELSOFT iQ AppPortal. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MI Configuratorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.005F or later for MI Configurator. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MR Configurator2cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.130L or later for MR Configurator2. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MT Works2cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.170C or later for MT Works2. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MTConnect Data Collectorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.1.5.0 or later for MTConnect Data Collector. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MX Componentcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 4.21X or later for MX Component. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MX MESInterfacecisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.22Y or later for MX MESInterface. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MX MESInterface-Rcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.13P or later for MX MESInterface-R. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric MX Sheetcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 2.16S or later for MX Sheet. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric M_CommDTM-IO-Linkcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.04E or later for M_CommDTM-IO-Link. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Motion Control Settingcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.006G or later for Motion Control Setting. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Motorizercisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.010L or later for Motorizer. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Network Interface Board CC IE Control Utilitycisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.30G or later for Network Interface Board CC IE Control Utility. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Network Interface Board CC IE Field Utilitycisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.17T or later for Network Interface Board CC IE Field Utility. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Network Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.24A or later for Network Interface Board CC-Link Ver.2 Utility. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Network Interface Board MNETH Utilitycisa_csaf_ot
Mitsubishi Electric is releasing fixed version 35M or later for Network Interface Board MNETH Utility. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric PX Developercisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.54G or later for PX Developer. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Position Board utility 2cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 3.30 or later for Position Board utility 2. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric RT ToolBox2cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 3.74C or later for RT ToolBox2. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric RT ToolBox3cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.90U or later for RT ToolBox3. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric SLMP Data Collectorcisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.05F or later for SLMP Data Collector. Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Setting/monitoring tools for the C Controller module (SW3PVC-CCPU)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 3.14Q or later for Setting/monitoring tools for the C Controller module (SW3PVC-CCPU). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 4.13P or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Simple Motion Module (Positioning Control) FB Library (Japanese)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.05F or later for Simple Motion Module (Positioning Control) FB Library (Japanese) and Simple Motion Module (Positioning Control) FB Library (Other languages). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Simple Motion Module (Positioning Control) FB Library (Other languages)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.05F or later for Simple Motion Module (Positioning Control) FB Library (Japanese) and Simple Motion Module (Positioning Control) FB Library (Other languages). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Simple Motion Module (Synchronous Control) FB Library (Japanese)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.03D or later for Simple Motion Module (Synchronous Control) FB Library (Japanese) and Simple Motion Module (Synchronous Control) FB Library (Other languages). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - FixedMitsubishi Electric Simple Motion Module (Synchronous Control) FB Library (Other languages)cisa_csaf_ot
Mitsubishi Electric is releasing fixed version 1.03D or later for Simple Motion Module (Synchronous Control) FB Library (Japanese) and Simple Motion Module (Synchronous Control) FB Library (Other languages). Please download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - MitigationMitsubishi Electric C Controller Interface Module utilitycisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric CC-Link IE Control Network Data Collectorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric CC-Link IE Field Network Data Collectorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric CC-Link IE TSN Data Collectorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric CPU Module Logging Configuration Toolcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric CW Configuratorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Data Transfercisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric EZSocketcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric FR Configurator SW3cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric FR Configurator2cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GT Designer2 Classiccisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GT Designer3 Version1 (GOT1000)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GT Designer3 Version1 (GOT2000)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GT SoftGOT1000 Version3cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GT SoftGOT2000 Version1cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GX Developercisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GX LogViewercisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GX Works2cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric GX Works3cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MELFA-Workscisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MELSEC WinCPU Setting Utilitycisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MELSOFT Complete Clean Up Toolcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MELSOFT EM Software Development Kitcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MELSOFT Navigatorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MELSOFT iQ AppPortalcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MI Configuratorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MR Configurator2cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MT Works2cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MTConnect Data Collectorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MX Componentcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MX MESInterfacecisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MX MESInterface-Rcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric MX Sheetcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric M_CommDTM-IO-Linkcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Motion Control Settingcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Motorizercisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Network Interface Board CC IE Control Utilitycisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Network Interface Board CC IE Field Utilitycisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Network Interface Board CC-Link Ver.2 Utilitycisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Network Interface Board MNETH Utilitycisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric PX Developercisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Position Board utility 2cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric QD62(E/D), LD62(D) FB Library (Japanese)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric QD64D2 FB Library (Japanese)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric QD72P3C3 FB Library (Japanese)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric RT ToolBox2cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric RT ToolBox3cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric SLMP Data Collectorcisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Setting/monitoring tools for the C Controller module (SW3PVC-CCPU)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Simple Motion Module (Positioning Control) FB Library (Japanese)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Simple Motion Module (Positioning Control) FB Library (Other languages)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Simple Motion Module (Synchronous Control) FB Library (Japanese)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- MitigationMitsubishi Electric Simple Motion Module (Synchronous Control) FB Library (Other languages)cisa_csaf_ot
For users of the affected products, Mitsubishi Electric recommends installing an antivirus software in your personal computer using the products, to minimize the risk of exploiting this vulnerability.
- No fix plannedMitsubishi Electric FR Configurator SW3cisa_csaf_ot
There are no plans to release a fixed version for FR Configurator SW3. Refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf", and take the actions described there.
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - No fix plannedMitsubishi Electric GT Designer2 Classiccisa_csaf_ot
There are no plans to release a fixed version for GT Designer2 Classic. Refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf", and take the actions described there.
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - No fix plannedMitsubishi Electric MELSEC WinCPU Setting Utilitycisa_csaf_ot
There are no plans to release a fixed version for MELSEC WinCPU Setting Utility. Refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf", and take the actions described there.
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - No fix plannedMitsubishi Electric QD62(E/D), LD62(D) FB Library (Japanese)cisa_csaf_ot
There are no plans to release a fixed version for QD62(E/D), LD62(D) FB Library (E/D). Refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf", and take the actions described there.
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - No fix plannedMitsubishi Electric QD64D2 FB Library (Japanese)cisa_csaf_ot
There are no plans to release a fixed version for QD64D2 FB Library (Japanese). Refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf", and take the actions described there.
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf - No fix plannedMitsubishi Electric QD72P3C3 FB Library (Japanese)cisa_csaf_ot
There are no plans to release a fixed version for QD72P3C3 FB Library (Japanese). Refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf", and take the actions described there.
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-007_en.pdf
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (201)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-20-212-04Mitsubishi Electric Factory Automation Engineering Products (Update L)2020-07-30icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow a remote attacker to disclose information, tamper with information, cause a denial-of-service (DoS) condition on the affected products, and so on by replacing certain files in the product which have improper permissions with crafted files.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- http://www.mitsubishielectric.com/Patchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-14521cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-212-04cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.2624/cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04cnnvd
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdfcnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04enisa_euvd
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdfenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan