Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
CVE-2020-14521

8.3HIGH

Key Information:

Vendor

Mitsubishi Electric

Status
C Controller Interface Module Utility
Cc-link Ie Control Network Data Collector
Cc-link Ie Field Network Data Collector
Cc-link Ie Tsn Data Collector
Vendor
CVE Published:
11 February 2022

What is CVE-2020-14521?

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

C Controller Interface Module Utility <= unspecified

CC-Link IE Control Network Data Collector Version 1.00A

CC-Link IE Field Network Data Collector Version 1.00A

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04
government-resource
https://www.mitsubishielectric.com/en/psirt/vulnerability...
vendor-advisory

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mashav Sapir of Claroty reported this vulnerability to CISA
JSON
.