Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
Priority MEDIUM 45CWE-428Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-428.
Summary
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01299 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mitsubishi Electric Corporation | C Controller Interface Module Utility | up to Version 2.00 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE Control Network Data Collector | Version 1.00A | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE Field Network Data Collector | Version 1.00A | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Data Collector | Version 1.00A | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CPU Module Logging Configuration Tool | up to Version 1.100E | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CW Configurator | up to Version 1.010L | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Data Transfer | up to Version 3.42U | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | EZSocket | up to Version 5.1 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | FR Configurator SW3 | All Versions | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | FR Configurator2 | up to Version 1.26C | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GT Designer2 Classic | All Versions | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GT Designer3 Version1 (GOT1000) | up to Version 1.241B | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GT Designer3 Version1 (GOT2000) | up to Version 1.241B | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GT SoftGOT1000 Version3 | up to Version 3.200J | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GT SoftGOT2000 Version1 | up to Version 1.241B | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GX Developer | up to Version 8.504A | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GX LogViewer | up to Version 1.100E | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GX Works2 | up to Version 1.601B | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GX Works3 | up to Version 1.063R | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | M_CommDTM-IO-Link | up to Version 1.03D | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELFA-Works | up to Version 4.4 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC WinCPU Setting Utility | All Versions | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSOFT Complete Clean Up Tool | up to Version 1.06G | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSOFT EM Software Development Kit | up to Version 1.015R | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSOFT iQ AppPortal | up to Version 1.17T | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSOFT Navigator | up to Version 2.74C | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MI Configurator | up to Version 1.004E | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Motion Control Setting | up to Version 1.005F | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Motorizer | up to Version 1.005F | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MR Configurator2 | up to Version 1.125F | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MT Works2 | up to Version 1.167Z | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MTConnect Data Collector | up to Version 1.1.4.0 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MX Component | up to Version 4.20W | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MX MESInterface | up to Version 1.21X | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MX MESInterface-R | up to Version 1.12N | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MX Sheet | up to Version 2.15R | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Network Interface Board CC IE Control Utility | up to Version 1.29F | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Network Interface Board CC IE Field Utility | up to Versions 1.16S | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Network Interface Board CC-Link Ver.2 Utility | up to Version 1.23Z | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Network Interface Board MNETH Utility | up to Version 34L | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Position Board utility 2 | up to Version 3.20 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | PX Developer | up to Version 1.53F | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | RT ToolBox2 | up to Version 3.73B | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | RT ToolBox3 | up to Version 1.82L | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | Setting/Monitoring tools for the C Controller module | up to SW3PVC-CCPU Version 3.13P; up to SW4PVC-CCPU Version 4.12N | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | SLMP Data Collector | up to Version 1.04E | — | No fix listed | CNA |
- C Controller Interface Module Utility VendorMitsubishi Electric Corporation Affected up to Version 2.00 Fixed in — No fix listed CNA
- CC-Link IE Control Network Data Collector VendorMitsubishi Electric Corporation Affected Version 1.00A Fixed in — No fix listed CNA
- CC-Link IE Field Network Data Collector VendorMitsubishi Electric Corporation Affected Version 1.00A Fixed in — No fix listed CNA
- CC-Link IE TSN Data Collector VendorMitsubishi Electric Corporation Affected Version 1.00A Fixed in — No fix listed CNA
- CPU Module Logging Configuration Tool VendorMitsubishi Electric Corporation Affected up to Version 1.100E Fixed in — No fix listed CNA
- CW Configurator VendorMitsubishi Electric Corporation Affected up to Version 1.010L Fixed in — No fix listed CNA
- Data Transfer VendorMitsubishi Electric Corporation Affected up to Version 3.42U Fixed in — No fix listed CNA
- EZSocket VendorMitsubishi Electric Corporation Affected up to Version 5.1 Fixed in — No fix listed CNA
- FR Configurator SW3 VendorMitsubishi Electric Corporation Affected All Versions Fixed in — No fix listed CNA
- FR Configurator2 VendorMitsubishi Electric Corporation Affected up to Version 1.26C Fixed in — No fix listed CNA
- GT Designer2 Classic VendorMitsubishi Electric Corporation Affected All Versions Fixed in — No fix listed CNA
- GT Designer3 Version1 (GOT1000) VendorMitsubishi Electric Corporation Affected up to Version 1.241B Fixed in — No fix listed CNA
- GT Designer3 Version1 (GOT2000) VendorMitsubishi Electric Corporation Affected up to Version 1.241B Fixed in — No fix listed CNA
- GT SoftGOT1000 Version3 VendorMitsubishi Electric Corporation Affected up to Version 3.200J Fixed in — No fix listed CNA
- GT SoftGOT2000 Version1 VendorMitsubishi Electric Corporation Affected up to Version 1.241B Fixed in — No fix listed CNA
- GX Developer VendorMitsubishi Electric Corporation Affected up to Version 8.504A Fixed in — No fix listed CNA
- GX LogViewer VendorMitsubishi Electric Corporation Affected up to Version 1.100E Fixed in — No fix listed CNA
- GX Works2 VendorMitsubishi Electric Corporation Affected up to Version 1.601B Fixed in — No fix listed CNA
- GX Works3 VendorMitsubishi Electric Corporation Affected up to Version 1.063R Fixed in — No fix listed CNA
- M_CommDTM-IO-Link VendorMitsubishi Electric Corporation Affected up to Version 1.03D Fixed in — No fix listed CNA
- MELFA-Works VendorMitsubishi Electric Corporation Affected up to Version 4.4 Fixed in — No fix listed CNA
- MELSEC WinCPU Setting Utility VendorMitsubishi Electric Corporation Affected All Versions Fixed in — No fix listed CNA
- MELSOFT Complete Clean Up Tool VendorMitsubishi Electric Corporation Affected up to Version 1.06G Fixed in — No fix listed CNA
- MELSOFT EM Software Development Kit VendorMitsubishi Electric Corporation Affected up to Version 1.015R Fixed in — No fix listed CNA
- MELSOFT iQ AppPortal VendorMitsubishi Electric Corporation Affected up to Version 1.17T Fixed in — No fix listed CNA
- MELSOFT Navigator VendorMitsubishi Electric Corporation Affected up to Version 2.74C Fixed in — No fix listed CNA
- MI Configurator VendorMitsubishi Electric Corporation Affected up to Version 1.004E Fixed in — No fix listed CNA
- Motion Control Setting VendorMitsubishi Electric Corporation Affected up to Version 1.005F Fixed in — No fix listed CNA
- Motorizer VendorMitsubishi Electric Corporation Affected up to Version 1.005F Fixed in — No fix listed CNA
- MR Configurator2 VendorMitsubishi Electric Corporation Affected up to Version 1.125F Fixed in — No fix listed CNA
- MT Works2 VendorMitsubishi Electric Corporation Affected up to Version 1.167Z Fixed in — No fix listed CNA
- MTConnect Data Collector VendorMitsubishi Electric Corporation Affected up to Version 1.1.4.0 Fixed in — No fix listed CNA
- MX Component VendorMitsubishi Electric Corporation Affected up to Version 4.20W Fixed in — No fix listed CNA
- MX MESInterface VendorMitsubishi Electric Corporation Affected up to Version 1.21X Fixed in — No fix listed CNA
- MX MESInterface-R VendorMitsubishi Electric Corporation Affected up to Version 1.12N Fixed in — No fix listed CNA
- MX Sheet VendorMitsubishi Electric Corporation Affected up to Version 2.15R Fixed in — No fix listed CNA
- Network Interface Board CC IE Control Utility VendorMitsubishi Electric Corporation Affected up to Version 1.29F Fixed in — No fix listed CNA
- Network Interface Board CC IE Field Utility VendorMitsubishi Electric Corporation Affected up to Versions 1.16S Fixed in — No fix listed CNA
- Network Interface Board CC-Link Ver.2 Utility VendorMitsubishi Electric Corporation Affected up to Version 1.23Z Fixed in — No fix listed CNA
- Network Interface Board MNETH Utility VendorMitsubishi Electric Corporation Affected up to Version 34L Fixed in — No fix listed CNA
- Position Board utility 2 VendorMitsubishi Electric Corporation Affected up to Version 3.20 Fixed in — No fix listed CNA
- PX Developer VendorMitsubishi Electric Corporation Affected up to Version 1.53F Fixed in — No fix listed CNA
- RT ToolBox2 VendorMitsubishi Electric Corporation Affected up to Version 3.73B Fixed in — No fix listed CNA
- RT ToolBox3 VendorMitsubishi Electric Corporation Affected up to Version 1.82L Fixed in — No fix listed CNA
- Setting/Monitoring tools for the C Controller module VendorMitsubishi Electric Corporation Affected up to SW3PVC-CCPU Version 3.13P; up to SW4PVC-CCPU Version 4.12N Fixed in — No fix listed CNA
- SLMP Data Collector VendorMitsubishi Electric Corporation Affected up to Version 1.04E Fixed in — No fix listed CNA
CPE configurations NVD · 60
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mitsubishielectric:c_controller_interface_module_utility:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:cc-link_ie_control_network_data_collector:1.00a:*:*:*:*:*:*:* | 1.00a | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:cc-link_ie_field_network_data_collector:1.00a:*:*:*:*:*:*:* | 1.00a | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:cc-link_ie_tsn_data_collector:1.00a:*:*:*:*:*:*:* | 1.00a | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:* | up to 1.100e | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* | up to 1.010l | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:* | up to 3.42u | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:* | up to 5.1 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
- cpe:2.3:a:mitsubishielectric:c_controller_interface_module_utility:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:cc-link_ie_control_network_data_collector:1.00a:*:*:*:*:*:*:* Versions 1.00a Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:cc-link_ie_field_network_data_collector:1.00a:*:*:*:*:*:*:* Versions 1.00a Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:cc-link_ie_tsn_data_collector:1.00a:*:*:*:*:*:*:* Versions 1.00a Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:* Versions up to 1.100e Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* Versions up to 1.010l Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:* Versions up to 3.42u Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:* Versions up to 5.1 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
Show 50 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gt_designer2_classic:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:* | 3.0 – 3.200j | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:* | 1.0 – 1.241b | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:* | up to 8.504a | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:* | up to 1.100e | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* | up to 1.601b | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* | up to 1.063r | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:* | up to 4.4 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsec_wincpu_setting_utility:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsoft_complete_clean_up_tool:*:*:*:*:*:*:*:* | up to 1.06g | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsoft_em_software_development_kit:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsoft_iq_appportal:*:*:*:*:*:*:*:* | up to 1.17t | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:* | up to 2.74c | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:motion_control_setting:*:*:*:*:*:*:*:* | up to 1.005f | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:motorizer:*:*:*:*:*:*:*:* | up to 1.005f | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* | up to 1.125f | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:* | up to 1.167z | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mtconnect_data_collector:*:*:*:*:*:*:*:* | up to 1.1.4.0 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* | up to 4.20w | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mx_mesinterface:*:*:*:*:*:*:*:* | up to 1.21x | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mx_mesinterface-r:*:*:*:*:*:*:*:* | up to 1.12n | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mx_sheet:*:*:*:*:*:*:*:* | up to 2.15r | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:position_board_utility_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:* | up to 1.53f | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:* | up to 3.73b | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* | up to 1.82l | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:setting\/monitoring_tools_for_the_c_controller_module:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:slmp_data_collector:*:*:*:*:*:*:*:* | up to 1.04e | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gt_designer3:*:*:*:*:*:*:*:* | up to 1.241b | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt14:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt21:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt23:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt25:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:got1000_series_gt27:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:network_interface_board_cc-link_ver.2_utility_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:network_interface_board_cc-link_ver.2_utility:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:network_interface_board_cc_ie_control_utility_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:network_interface_board_cc_ie_control_utility:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:network_interface_board_cc_ie_field_utility_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:network_interface_board_cc_ie_field_utility:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:network_interface_board_mneth_utility_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:network_interface_board_mneth_utility:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
- cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gt_designer2_classic:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:* Versions 3.0 – 3.200j Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:* Versions 1.0 – 1.241b Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:* Versions up to 8.504a Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:* Versions up to 1.100e Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* Versions up to 1.601b Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* Versions up to 1.063r Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:* Versions up to 4.4 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsec_wincpu_setting_utility:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsoft_complete_clean_up_tool:*:*:*:*:*:*:*:* Versions up to 1.06g Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsoft_em_software_development_kit:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsoft_iq_appportal:*:*:*:*:*:*:*:* Versions up to 1.17t Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:* Versions up to 2.74c Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:motion_control_setting:*:*:*:*:*:*:*:* Versions up to 1.005f Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:motorizer:*:*:*:*:*:*:*:* Versions up to 1.005f Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* Versions up to 1.125f Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:* Versions up to 1.167z Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mtconnect_data_collector:*:*:*:*:*:*:*:* Versions up to 1.1.4.0 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* Versions up to 4.20w Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mx_mesinterface:*:*:*:*:*:*:*:* Versions up to 1.21x Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mx_mesinterface-r:*:*:*:*:*:*:*:* Versions up to 1.12n Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mx_sheet:*:*:*:*:*:*:*:* Versions up to 2.15r Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:position_board_utility_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:* Versions up to 1.53f Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:* Versions up to 3.73b Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* Versions up to 1.82l Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:setting\/monitoring_tools_for_the_c_controller_module:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:slmp_data_collector:*:*:*:*:*:*:*:* Versions up to 1.04e Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gt_designer3:*:*:*:*:*:*:*:* Versions up to 1.241b Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt14:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt23:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt25:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:got1000_series_gt27:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:network_interface_board_cc-link_ver.2_utility_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:network_interface_board_cc-link_ver.2_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:network_interface_board_cc_ie_control_utility_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:network_interface_board_cc_ie_control_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:network_interface_board_cc_ie_field_utility_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:network_interface_board_cc_ie_field_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:network_interface_board_mneth_utility_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:network_interface_board_mneth_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-14521
- 2026-10-03 Alias added: GHSA-7hfr-xh2r-6vj8
References
More Mitsubishi Electric Corporation vulnerabilities
- TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
- TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
- TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
- TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
- TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
- TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
Sources
- CVE-2020-14521 · CVE Program
- CVE-2020-14521 · NVD
- FIRST EPSS
- GHSA-7hfr-xh2r-6vj8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences