CVE-2020-14496: Mitsubishielectric CPU Module Logging Configuration Tool
Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Affected products
- Mitsubishielectric CPU Module Logging Configuration Tool: before 1.106k (fixed in 1.106k)
- Mitsubishielectric Cw Configurator: before 1.011m (fixed in 1.011m)
- Mitsubishielectric Data Transfer: before 3.41t (fixed in 3.41t)
- Mitsubishielectric Em Configurator: before 1.015r (fixed in 1.015r)
- Mitsubishielectric Ezsocket: before 4.6 (fixed in 4.6)
- Mitsubishielectric Fr CONFIGURATOR2: before 1.23z (fixed in 1.23z)
- Mitsubishielectric Gt DESIGNER3: before 1.236w (fixed in 1.236w)
- Mitsubishielectric Gt SOFTGOT1000: before 3.245f (fixed in 3.245f)
- Mitsubishielectric Gt SOFTGOT2000: before 1.236w (fixed in 1.236w)
- Mitsubishielectric Gx Logviewer: before 1.106k (fixed in 1.106k)
- Mitsubishielectric Gx WORKS2: before 1.595v (fixed in 1.595v)
- Mitsubishielectric Gx WORKS3: before 1.065t (fixed in 1.065t)
- Mitsubishielectric M Commdtm-Hart: before 1.01b (fixed in 1.01b)
- Mitsubishielectric M Commdtm-Io-Link: before 1.04e (fixed in 1.04e)
- Mitsubishielectric Melfa-Works: before 4.4 (fixed in 4.4)
- Mitsubishielectric Melsoft Fielddeviceconfigurator: before 1.04e (fixed in 1.04e)
- Mitsubishielectric Melsoft Navigator: before 2.70y (fixed in 2.70y)
- Mitsubishielectric MH11 Settingtool VERSION2: before 2.003d (fixed in 2.003d)
- Mitsubishielectric Motorizer: before 1.010l (fixed in 1.010l)
- Mitsubishielectric Mr CONFIGURATOR2: before 1.106l (fixed in 1.106l)
- Mitsubishielectric Mt WORKS2: before 1.160s (fixed in 1.160s)
- Mitsubishielectric Mx Component: before 4.20w (fixed in 4.20w)
- Mitsubishielectric Network Interface Board Cc-Link ver.2 Utility: before 1.24a (fixed in 1.24a)
- Mitsubishielectric Network Interface Board Cc Ie Control Utility: before 1.30g (fixed in 1.30g)
- Mitsubishielectric Network Interface Board Cc Ie Field Utility: before 1.17t (fixed in 1.17t)
- and 4 more
Published 2022-05-19. Last modified 2026-06-17.