CVE-2020-14496 - CVE House
Back to Database
Status published High CVE-2020-14496

Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

Vulnerability Description

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-14496

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric

View All →
CVE-2022-40266
Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series
Medium 5.3
CVE-2022-33320
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions...
High 7.8
CVE-2022-33319
Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to...
High 8.2
CVE-2022-33318
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions...
Critical 9.8
CVE-2022-33317
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi...
High 7.8

Affected Vendor

Mitsubishi Electric

View all reports →

Affected Software

CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator2, GT Designer3 Version1 (GOT2000), GT SoftGOT1000 Version3, GT SoftGOT2000 Version1, GX LogViewer, GX Works2, GX Works3, M_CommDTM-HART, M_CommDTM-IO-Link, MELFA-Works, MELSEC WinCPU Setting Utility, MELSOFT EM Software Development Kit (EM Configurator), MELSOFT FieldDeviceConfigurator, MELSOFT Navigator, MH11 SettingTool Version2, MI Configurator, Motorizer, MR Configurator2, MT Works2, MX Component, Network Interface Board CC IE Control utility, Network Interface Board CC IE Field Utility, Network Interface Board CC-Link Ver.2 Utility, Network Interface Board MNETH utility, PX Developer, RT ToolBox2, RT ToolBox3, Setting/monitoring tools for the C Controller module
Vulnerable Versions:
All, All 1.00A

Timeline

Official Publish: May 19th, 2022
Last Modified: April 16th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-275

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.