CVE-2020-14523highCWE-22

CVE-2020-14523: falha de alta gravidade em Mitsubishi Electric CW Configurator

Mitsubishi Electric Factory Automation Products Path Traversal

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar GX Works3+ Monitorar GX Works2

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.3epss 2.3%
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
Mitsubishi Electric · CW ConfiguratorMitsubishi Electric · FR Configurator2Mitsubishi Electric · GX Works2Mitsubishi Electric · GX Works3Mitsubishi Electric · MELSEC iQ-R Series Motion ModuleMitsubishi Electric · MELSOFT iQ AppPortalMitsubishi Electric · MELSOFT NavigatorMitsubishi Electric · MI ConfiguratorMitsubishi Electric · MR Configurator2Mitsubishi Electric · MT Works2Mitsubishi Electric · MX ComponentMitsubishi Electric · RT ToolBox3
CVEs relacionadas — Mitsubishi Electric CW Configurator

No mesmo produto, das mais perigosas para as menos.

CVE-2020-14521HIGHMitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or ElementEPSS 1.3%CVE-2020-14496HIGHMitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission IssuesEPSS 0.9%