CVE-2020-14521

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element

CVSS 8.3 HIGHEPSS 1.2%CWE-428

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Produtos afetados

Mitsubishi Electric · CC-Link IE Control Network Data Collector Mitsubishi Electric · CC-Link IE Field Network Data Collector Mitsubishi Electric · CC-Link IE TSN Data Collector Mitsubishi Electric · C Controller Interface Module Utility Mitsubishi Electric · CPU Module Logging Configuration Tool Mitsubishi Electric · CW Configurator Mitsubishi Electric · Data Transfer Mitsubishi Electric · EZSocket Mitsubishi Electric · FR Configurator2 Mitsubishi Electric · FR Configurator SW3 Mitsubishi Electric · GT Designer2 Classic Mitsubishi Electric · GT Designer3 Version1 (GOT1000)Mitsubishi Electric · GT Designer3 Version1 (GOT2000)Mitsubishi Electric · GT SoftGOT1000 Version3 Mitsubishi Electric · GT SoftGOT2000 Version1 Mitsubishi Electric · GX Developer Mitsubishi Electric · GX LogViewer Mitsubishi Electric · GX Works2 Mitsubishi Electric · GX Works3 Mitsubishi Electric · M_CommDTM-IO-Link Mitsubishi Electric · MELFA-Works Mitsubishi Electric · MELSEC WinCPU Setting Utility Mitsubishi Electric · MELSOFT Complete Clean Up Tool Mitsubishi Electric · MELSOFT EM Software Development Kit Mitsubishi Electric · MELSOFT iQ AppPortal Mitsubishi Electric · MELSOFT Navigator Mitsubishi Electric · MI Configurator Mitsubishi Electric · Motion Control Setting Mitsubishi Electric · Motorizer Mitsubishi Electric · MR Configurator2 Mitsubishi Electric · MTConnect Data Collector Mitsubishi Electric · MT Works2 Mitsubishi Electric · MX Component Mitsubishi Electric · MX MESInterface Mitsubishi Electric · MX MESInterface-R Mitsubishi Electric · MX Sheet Mitsubishi Electric · Network Interface Board CC IE Control Utility Mitsubishi Electric · Network Interface Board CC IE Field Utility Mitsubishi Electric · Network Interface Board CC-Link Ver.2 Utility Mitsubishi Electric · Network Interface Board MNETH Utility Mitsubishi Electric · Position Board utility 2 Mitsubishi Electric · PX Developer Mitsubishi Electric · RT ToolBox2 Mitsubishi Electric · RT ToolBox3 Mitsubishi Electric · Setting/Monitoring tools for the C Controller module Mitsubishi Electric · SLMP Data Collector

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf