CVE-2020-14496 (GCVE-0-2020-14496)

Vulnerability from cvelistv5 – Published: 2022-05-19 17:24 – Updated: 2025-04-16 17:53
VLAI
Title
Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
Summary
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Severity
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
Mitsubishi Electric CPU Module Logging Configuration Tool Affected: All , ≤ 1.100E (custom)
Create a notification for this product.
Mitsubishi Electric CW Configurator Affected: All , ≤ 1.010L (custom)
Create a notification for this product.
Mitsubishi Electric Data Transfer Affected: All , ≤ 3.40S (custom)
Create a notification for this product.
Mitsubishi Electric EZSocket Affected: All , ≤ 4.5 (custom)
Create a notification for this product.
Mitsubishi Electric FR Configurator2 Affected: All , ≤ 1.22Y (custom)
Create a notification for this product.
Mitsubishi Electric GT Designer3 Version1 (GOT2000) Affected: All , ≤ 1.235V (custom)
Create a notification for this product.
Mitsubishi Electric GT SoftGOT1000 Version3 Affected: All , ≤ 3.200J (custom)
Create a notification for this product.
Mitsubishi Electric GT SoftGOT1000 Version3 Affected: All
Create a notification for this product.
Mitsubishi Electric GT SoftGOT2000 Version1 Affected: All , ≤ 1.235V (custom)
Create a notification for this product.
Mitsubishi Electric GX LogViewer Affected: All , ≤ 1.100E (custom)
Create a notification for this product.
Mitsubishi Electric GX Works2 Affected: All , ≤ 1.592S (custom)
Create a notification for this product.
Mitsubishi Electric GX Works3 Affected: All , ≤ 1.063R (custom)
Create a notification for this product.
Mitsubishi Electric M_CommDTM-HART Affected: All 1.00A
Create a notification for this product.
Mitsubishi Electric M_CommDTM-IO-Link Affected: All
Create a notification for this product.
Mitsubishi Electric MELFA-Works Affected: All , ≤ 4.3 (custom)
Create a notification for this product.
Mitsubishi Electric MELSEC WinCPU Setting Utility Affected: All
Create a notification for this product.
Mitsubishi Electric MELSOFT EM Software Development Kit (EM Configurator) Affected: All , ≤ 1.010L (custom)
Create a notification for this product.
Mitsubishi Electric MELSOFT FieldDeviceConfigurator Affected: All , ≤ 1.03D (custom)
Create a notification for this product.
Mitsubishi Electric MELSOFT Navigator Affected: All , ≤ 2.62Q (custom)
Create a notification for this product.
Mitsubishi Electric MH11 SettingTool Version2 Affected: All , ≤ 2.002C (custom)
Create a notification for this product.
Mitsubishi Electric MI Configurator Affected: All
Create a notification for this product.
Mitsubishi Electric Motorizer Affected: All , ≤ 1.005F (custom)
Create a notification for this product.
Mitsubishi Electric MR Configurator2 Affected: All , ≤ 1.105K (custom)
Create a notification for this product.
Mitsubishi Electric MT Works2 Affected: All , ≤ 1.156N (custom)
Create a notification for this product.
Mitsubishi Electric MX Component Affected: All , ≤ 4.19V (custom)
Create a notification for this product.
Mitsubishi Electric Network Interface Board CC IE Control utility Affected: All
Create a notification for this product.
Mitsubishi Electric Network Interface Board CC IE Field Utility Affected: All
Create a notification for this product.
Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility Affected: All
Create a notification for this product.
Mitsubishi Electric Network Interface Board MNETH utility Affected: All
Create a notification for this product.
Mitsubishi Electric PX Developer Affected: All , ≤ 1.52E (custom)
Create a notification for this product.
Mitsubishi Electric RT ToolBox2 Affected: All , ≤ 3.72A (custom)
Create a notification for this product.
Mitsubishi Electric RT ToolBox3 Affected: All , ≤ 1.70Y (custom)
Create a notification for this product.
Mitsubishi Electric Setting/monitoring tools for the C Controller module Affected: All
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:46:34.676Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-14496",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T17:29:04.161678Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T17:53:51.797Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "CPU Module Logging Configuration Tool",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.100E",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "CW Configurator",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.010L",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Data Transfer",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "3.40S",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "EZSocket",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "4.5",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "FR Configurator2",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.22Y",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "GT Designer3 Version1 (GOT2000)",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.235V",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "GT SoftGOT1000 Version3",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "3.200J",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "GT SoftGOT1000 Version3",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "GT SoftGOT2000 Version1",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.235V",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "GX LogViewer",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.100E",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "GX Works2",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.592S",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "GX Works3",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.063R",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M_CommDTM-HART",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All 1.00A"
            }
          ]
        },
        {
          "product": "M_CommDTM-IO-Link",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "MELFA-Works",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "4.3",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MELSEC WinCPU Setting Utility",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "MELSOFT EM Software Development Kit (EM Configurator)",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.010L",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MELSOFT FieldDeviceConfigurator",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.03D",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MELSOFT Navigator",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "2.62Q",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MH11 SettingTool Version2",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "2.002C",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MI Configurator",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "Motorizer",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.005F",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MR Configurator2",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.105K",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MT Works2",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.156N",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "MX Component",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "4.19V",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Network Interface Board CC IE Control utility",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "Network Interface Board CC IE Field Utility",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "Network Interface Board CC-Link Ver.2 Utility",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "Network Interface Board MNETH utility",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        },
        {
          "product": "PX Developer",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.52E",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "RT ToolBox2",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "3.72A",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "RT ToolBox3",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "lessThanOrEqual": "1.70Y",
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Setting/monitoring tools for the C Controller module",
          "vendor": "Mitsubishi Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-275",
              "description": "CWE-275 Permission Issues",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-19T17:24:43.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02"
        }
      ],
      "source": {
        "advisory": "ICSA-20-212-02",
        "discovery": "UNKNOWN"
      },
      "title": "Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2020-14496",
          "STATE": "PUBLIC",
          "TITLE": "Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "CPU Module Logging Configuration Tool",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.100E"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CW Configurator",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.010L"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Data Transfer",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "3.40S"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "EZSocket",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "4.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "FR Configurator2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.22Y"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GT Designer3 Version1 (GOT2000)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.235V"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GT SoftGOT1000 Version3",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "3.200J"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GT SoftGOT1000 Version3",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GT SoftGOT2000 Version1",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.235V"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GX LogViewer",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.100E"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GX Works2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.592S"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GX Works3",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.063R"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M_CommDTM-HART",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "1.00A"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M_CommDTM-IO-Link",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MELFA-Works",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "4.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MELSEC WinCPU Setting Utility",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MELSOFT EM Software Development Kit (EM Configurator)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.010L"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MELSOFT FieldDeviceConfigurator",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.03D"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MELSOFT Navigator",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "2.62Q"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MH11 SettingTool Version2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "2.002C"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MI Configurator",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Motorizer",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.005F"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MR Configurator2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.105K"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MT Works2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.156N"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MX Component",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "4.19V"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Network Interface Board CC IE Control utility",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Network Interface Board CC IE Field Utility",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Network Interface Board CC-Link Ver.2 Utility",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Network Interface Board MNETH utility",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PX Developer",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.52E"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "RT ToolBox2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "3.72A"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "RT ToolBox3",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "All",
                            "version_value": "1.70Y"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Setting/monitoring tools for the C Controller module",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "All",
                            "version_value": "All"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mitsubishi Electric"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-275 Permission Issues"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02",
              "refsource": "MISC",
              "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02"
            }
          ]
        },
        "source": {
          "advisory": "ICSA-20-212-02",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2020-14496",
    "datePublished": "2022-05-19T17:24:43.000Z",
    "dateReserved": "2020-06-19T00:00:00.000Z",
    "dateUpdated": "2025-04-16T17:53:51.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2020-14496",
      "date": "2026-05-28",
      "epss": "0.00129",
      "percentile": "0.31988"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2020-14496\",\"sourceIdentifier\":\"ics-cert@hq.dhs.gov\",\"published\":\"2022-05-19T18:15:08.360\",\"lastModified\":\"2024-11-21T05:03:23.697\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.\"},{\"lang\":\"es\",\"value\":\"Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad para m\u00faltiples Productos Mitsubishi Electric Factory Automation Engineering Software de varias versiones podr\u00eda permitir a un atacante escalar privilegios y ejecutar programas maliciosos, lo que podr\u00eda causar una condici\u00f3n de denegaci\u00f3n de servicio, y permitir que la informaci\u00f3n sea divulgada, manipulada y/o destruida\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ics-cert@hq.dhs.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"baseScore\":8.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":6.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"ics-cert@hq.dhs.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-275\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.106k\",\"matchCriteriaId\":\"69A02BE6-633A-4A94-890C-586B3A42E19F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.011m\",\"matchCriteriaId\":\"60875630-C0F2-434E-8D11-51B44F62CBA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.41t\",\"matchCriteriaId\":\"EE83331F-B795-410A-8510-351945025444\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:em_configurator:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.015r\",\"matchCriteriaId\":\"A0A01F0C-0B10-4906-9389-4D53AE3CD7FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.6\",\"matchCriteriaId\":\"A9FFEA10-20FA-4B73-ACA5-AB7462820123\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.23z\",\"matchCriteriaId\":\"2877EB49-8A69-426B-B7EB-87DEF3975562\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_designer3:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.236w\",\"matchCriteriaId\":\"C3393020-A6E6-431A-B572-E28948F6A970\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.245f\",\"matchCriteriaId\":\"3DC963D1-281A-48DE-B822-5254643C98E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.236w\",\"matchCriteriaId\":\"20E2D739-F982-4ED4-ADFB-505777CF9888\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.106k\",\"matchCriteriaId\":\"0809A627-EEC8-475E-997F-E3FAE2C39261\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.595v\",\"matchCriteriaId\":\"7F2B0AC1-1BEC-4D79-9995-527E3A770A66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.065t\",\"matchCriteriaId\":\"80BF474D-E018-4612-93FD-F3A661C13A6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:m_commdtm-hart:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.01b\",\"matchCriteriaId\":\"9C9ECB87-B07E-4E52-BF3F-8AD4AA03826B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.04e\",\"matchCriteriaId\":\"50FA8FAD-3DF4-453C-A55C-5F622DD76460\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.4\",\"matchCriteriaId\":\"ED888C84-4CD8-464A-A3A0-F623EB0F4920\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:melsoft_fielddeviceconfigurator:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.04e\",\"matchCriteriaId\":\"EE1E2976-38B4-4B1B-AC01-B3D8C26A1BB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.70y\",\"matchCriteriaId\":\"01D32795-831A-43D6-9F90-82A67F5E9081\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mh11_settingtool_version2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.003d\",\"matchCriteriaId\":\"7A6DE218-D030-4DDF-B504-B176DFE7662A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:motorizer:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.010l\",\"matchCriteriaId\":\"0FD24F8E-869B-413A-9BF1-555CF827F3C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.106l\",\"matchCriteriaId\":\"470498DC-4A30-4EC2-B9C7-B5348D2F1381\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.160s\",\"matchCriteriaId\":\"7926DBE1-335C-40E2-AD74-AE89DC9A0095\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.20w\",\"matchCriteriaId\":\"DCBBBA97-3C41-423F-8534-098070E49A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:network_interface_board_cc-link_ver.2_utility:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.24a\",\"matchCriteriaId\":\"3CFA2E01-1D66-40D6-8575-0E216376CC25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_control_utility:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.30g\",\"matchCriteriaId\":\"EBC15323-7468-4688-A9C2-01208B4849A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_field_utility:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.17t\",\"matchCriteriaId\":\"F605A144-5A10-44C9-94DC-3B0D66E39431\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:network_interface_board_mneth_utility:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"35m\",\"matchCriteriaId\":\"54DBB417-5543-4AEB-9467-6197868C8C18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.53f\",\"matchCriteriaId\":\"9987641F-1BD4-445A-86E4-778CFFFFEBD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.73b\",\"matchCriteriaId\":\"A11F999D-CE97-49B6-9AF3-DD32D0E0779F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.80j\",\"matchCriteriaId\":\"B03CE992-45F6-48EA-BE86-0041F0CDBEF7\"}]}]}],\"references\":[{\"url\":\"https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02\",\"source\":\"ics-cert@hq.dhs.gov\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T12:46:34.676Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2020-14496\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-16T17:29:04.161678Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-04-16T17:29:05.540Z\"}}], \"cna\": {\"title\": \"Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues\", \"source\": {\"advisory\": \"ICSA-20-212-02\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Mitsubishi Electric\", \"product\": \"CPU Module Logging Configuration Tool\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.100E\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"CW Configurator\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.010L\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Data Transfer\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"3.40S\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"EZSocket\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"4.5\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"FR Configurator2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.22Y\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GT Designer3 Version1 (GOT2000)\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.235V\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GT SoftGOT1000 Version3\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"3.200J\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GT SoftGOT1000 Version3\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GT SoftGOT2000 Version1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.235V\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GX LogViewer\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.100E\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GX Works2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.592S\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"GX Works3\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.063R\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"M_CommDTM-HART\", \"versions\": [{\"status\": \"affected\", \"version\": \"All 1.00A\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"M_CommDTM-IO-Link\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MELFA-Works\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"4.3\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MELSEC WinCPU Setting Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MELSOFT EM Software Development Kit (EM Configurator)\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.010L\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MELSOFT FieldDeviceConfigurator\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.03D\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MELSOFT Navigator\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.62Q\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MH11 SettingTool Version2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.002C\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MI Configurator\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Motorizer\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.005F\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MR Configurator2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.105K\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MT Works2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.156N\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"MX Component\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"4.19V\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Network Interface Board CC IE Control utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Network Interface Board CC IE Field Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Network Interface Board CC-Link Ver.2 Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Network Interface Board MNETH utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"PX Developer\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.52E\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"RT ToolBox2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"3.72A\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"RT ToolBox3\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.70Y\"}]}, {\"vendor\": \"Mitsubishi Electric\", \"product\": \"Setting/monitoring tools for the C Controller module\", \"versions\": [{\"status\": \"affected\", \"version\": \"All\"}]}], \"references\": [{\"url\": \"https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02\", \"tags\": [\"x_refsource_MISC\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-275\", \"description\": \"CWE-275 Permission Issues\"}]}], \"providerMetadata\": {\"orgId\": \"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6\", \"shortName\": \"icscert\", \"dateUpdated\": \"2022-05-19T17:24:43.000Z\"}, \"x_legacyV4Record\": {\"impact\": {\"cvss\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, \"source\": {\"advisory\": \"ICSA-20-212-02\", \"discovery\": \"UNKNOWN\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.100E\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"CPU Module Logging Configuration Tool\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.010L\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"CW Configurator\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"3.40S\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"Data Transfer\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"4.5\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"EZSocket\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.22Y\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"FR Configurator2\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.235V\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"GT Designer3 Version1 (GOT2000)\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"3.200J\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"GT SoftGOT1000 Version3\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"GT SoftGOT1000 Version3\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.235V\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"GT SoftGOT2000 Version1\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.100E\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"GX LogViewer\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.592S\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"GX Works2\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.063R\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"GX Works3\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.00A\", \"version_affected\": \"=\"}]}, \"product_name\": \"M_CommDTM-HART\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"M_CommDTM-IO-Link\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"4.3\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MELFA-Works\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"MELSEC WinCPU Setting Utility\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.010L\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MELSOFT EM Software Development Kit (EM Configurator)\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.03D\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MELSOFT FieldDeviceConfigurator\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"2.62Q\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MELSOFT Navigator\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"2.002C\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MH11 SettingTool Version2\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"MI Configurator\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.005F\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"Motorizer\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.105K\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MR Configurator2\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.156N\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MT Works2\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"4.19V\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"MX Component\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"Network Interface Board CC IE Control utility\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"Network Interface Board CC IE Field Utility\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"Network Interface Board CC-Link Ver.2 Utility\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"Network Interface Board MNETH utility\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.52E\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"PX Developer\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"3.72A\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"RT ToolBox2\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"1.70Y\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"RT ToolBox3\"}, {\"version\": {\"version_data\": [{\"version_name\": \"All\", \"version_value\": \"All\", \"version_affected\": \"=\"}]}, \"product_name\": \"Setting/monitoring tools for the C Controller module\"}]}, \"vendor_name\": \"Mitsubishi Electric\"}]}}, \"data_type\": \"CVE\", \"generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"references\": {\"reference_data\": [{\"url\": \"https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02\", \"name\": \"https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-275 Permission Issues\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2020-14496\", \"STATE\": \"PUBLIC\", \"TITLE\": \"Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues\", \"ASSIGNER\": \"ics-cert@hq.dhs.gov\"}}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2020-14496\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-16T17:53:51.797Z\", \"dateReserved\": \"2020-06-19T00:00:00.000Z\", \"assignerOrgId\": \"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6\", \"datePublished\": \"2022-05-19T17:24:43.000Z\", \"assignerShortName\": \"icscert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.