CVE-2020-14523: Mitsubishielectric Cw Configurator

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

Affected products

• Mitsubishielectric Cw Configurator: up to and including 1.010l
• Mitsubishielectric Fr CONFIGURATOR2: up to and including 1.22y
• Mitsubishielectric Gx WORKS2: up to and including 1.595v
• Mitsubishielectric Gx WORKS3: up to and including 1.063r
• Mitsubishielectric Iu Configuration Tool: up to and including 1.04
• Mitsubishielectric Iu DEVELOPER2: up to and including 1.08
• Mitsubishielectric Melsoft Iq Appportal: up to and including 1.17t
• Mitsubishielectric Melsoft Navigator: up to and including 2.70y
• Mitsubishielectric Mi Configurator: any version
• Mitsubishielectric Mr CONFIGURATOR2: up to and including 1.110q
• Mitsubishielectric Mt WORKS2: up to and including 1.156n
• Mitsubishielectric Mx Component: up to and including 4.20w
• Mitsubishielectric RD78G16 Firmware: up to and including 10
• Mitsubishielectric RD78G32 Firmware: up to and including 10
• Mitsubishielectric RD78G4 Firmware: up to and including 10
• Mitsubishielectric RD78G64 Firmware: up to and including 10
• Mitsubishielectric RD78G8 Firmware: up to and including 10
• Mitsubishielectric RD78GHV Firmware: up to and including 10
• Mitsubishielectric RD78GHW Firmware: up to and including 10
• Mitsubishielectric Rt TOOLBOX3: up to and including 1.70y

Published 2022-02-11. Last modified 2026-06-17.