by Kastro CVE-2020-14496
Mitsubishi Electric CPU Module Logging Configuration Tool — Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
Description · from the CVE record
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Affected
ProductAffectedFixed inSource
CPU Module Logging Configuration ToolAll – 1.100E–CNA
CW ConfiguratorAll – 1.010L–CNA
Data TransferAll – 3.40S–CNA
EZSocketAll – 4.5–CNA
FR Configurator2All – 1.22Y–CNA
GT Designer3 Version1 (GOT2000)All – 1.235V–CNA
GT SoftGOT1000 Version3All – 3.200J–CNA
GT SoftGOT1000 Version3All–CNA
GT SoftGOT2000 Version1All – 1.235V–CNA
GX LogViewerAll – 1.100E–CNA
GX Works2All – 1.592S–CNA
GX Works3All – 1.063R–CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)8.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total