CVE-2020-14521: Mitsubishielectric C Controller Interface Module Utility

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Affected products

• Mitsubishielectric C Controller Interface Module Utility: any version
• Mitsubishielectric C Controller Module Setting And Monitoring Tool: any version
• Mitsubishielectric Cc-Link Ie Control Network Data Collector: version 1.00a only
• Mitsubishielectric Cc-Link Ie Field Network Data Collector: version 1.00a only
• Mitsubishielectric Cc-Link Ie Tsn Data Collector: version 1.00a only
• Mitsubishielectric CPU Module Logging Configuration Tool: up to and including 1.100e
• Mitsubishielectric Cw Configurator: up to and including 1.010l
• Mitsubishielectric Data Transfer: up to and including 3.42u
• Mitsubishielectric Ezsocket: up to and including 5.1
• Mitsubishielectric Fr CONFIGURATOR2: any version
• Mitsubishielectric Fr Configurator SW3: any version
• Mitsubishielectric Gt DESIGNER2 Classic: any version
• Mitsubishielectric Gt DESIGNER3: up to and including 1.241b
• Mitsubishielectric Gt SOFTGOT1000: from 3.0, up to and including 3.200j
• Mitsubishielectric Gt SOFTGOT2000: from 1.0, up to and including 1.241b
• Mitsubishielectric Gx Developer: up to and including 8.504a
• Mitsubishielectric Gx Logviewer: up to and including 1.100e
• Mitsubishielectric Gx WORKS2: up to and including 1.601b
• Mitsubishielectric Gx WORKS3: up to and including 1.063r
• Mitsubishielectric M Commdtm-Io-Link: any version
• Mitsubishielectric Melfa-Works: up to and including 4.4
• Mitsubishielectric Melsec Wincpu Setting Utility: any version
• Mitsubishielectric Melsoft Complete Clean Up Tool: up to and including 1.06g
• Mitsubishielectric Melsoft Em Software Development Kit: any version
• Mitsubishielectric Melsoft Iq Appportal: up to and including 1.17t
• and 21 more

Published 2022-02-11. Last modified 2026-06-17.