Mitsubishi Electric Factory Automation Products Path Traversal
CVE-2020-14523

8.3HIGH

Key Information:

Vendor

Mitsubishi Electric

Status
Cw Configurator
Fr Configurator2
Gx Works2
Gx Works3
Vendor
CVE Published:
11 February 2022

What is CVE-2020-14523?

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CW Configurator <= unspecified

FR Configurator2 <= unspecified

GX Works2 <= unspecified

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-03
x_refsource_MISC
https://www.mitsubishielectric.com/en/psirt/vulnerability...
x_refsource_MISC
https://jvn.jp/vu/JVNVU90224831/
x_refsource_MISC

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mashav Sapir of Claroty reported this vulnerability to CISA
JSON
.