Mitsubishi Electric Factory Automation Products Path Traversal
Priority MEDIUM 47CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02254 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mitsubishi Electric Corporation | CW Configurator | up to Version 1.010L | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | FR Configurator2 | up to Version 1.22Y | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GX Works2 | up to Version 1.595V | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | GX Works3 | up to Version 1.063R | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSOFT iQ AppPortal | up to Version 1.17T | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSOFT Navigator | up to Version2.70Y | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MI Configurator | All Versions | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MR Configurator2 | up to Version 1.110Q | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MT Works2 | up to Versions 1.156N | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MX Component | up to Version 4.20W | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | RT ToolBox3 | up to Versions 1.70Y | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series Motion Module | up to Versions 10 | — | No fix listed | CNA |
- CW Configurator VendorMitsubishi Electric Corporation Affected up to Version 1.010L Fixed in — No fix listed CNA
- FR Configurator2 VendorMitsubishi Electric Corporation Affected up to Version 1.22Y Fixed in — No fix listed CNA
- GX Works2 VendorMitsubishi Electric Corporation Affected up to Version 1.595V Fixed in — No fix listed CNA
- GX Works3 VendorMitsubishi Electric Corporation Affected up to Version 1.063R Fixed in — No fix listed CNA
- MELSOFT iQ AppPortal VendorMitsubishi Electric Corporation Affected up to Version 1.17T Fixed in — No fix listed CNA
- MELSOFT Navigator VendorMitsubishi Electric Corporation Affected up to Version2.70Y Fixed in — No fix listed CNA
- MI Configurator VendorMitsubishi Electric Corporation Affected All Versions Fixed in — No fix listed CNA
- MR Configurator2 VendorMitsubishi Electric Corporation Affected up to Version 1.110Q Fixed in — No fix listed CNA
- MT Works2 VendorMitsubishi Electric Corporation Affected up to Versions 1.156N Fixed in — No fix listed CNA
- MX Component VendorMitsubishi Electric Corporation Affected up to Version 4.20W Fixed in — No fix listed CNA
- RT ToolBox3 VendorMitsubishi Electric Corporation Affected up to Versions 1.70Y Fixed in — No fix listed CNA
- MELSEC iQ-R Series Motion Module VendorMitsubishi Electric Corporation Affected up to Versions 10 Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* | up to 1.010l | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:* | up to 1.22y | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* | up to 1.595v | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* | up to 1.063r | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:iu_configuration_tool:*:*:*:*:*:*:*:* | up to 1.04 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:iu_developer2:*:*:*:*:*:*:*:* | up to 1.08 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsoft_iq_appportal:*:*:*:*:*:*:*:* | up to 1.17t | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:* | up to 2.70y | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:* | all versions | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* | up to 1.110q | Vulnerable | Mitsubishi Electric Europe B.V. |
- cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* Versions up to 1.010l Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:* Versions up to 1.22y Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* Versions up to 1.595v Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* Versions up to 1.063r Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:iu_configuration_tool:*:*:*:*:*:*:*:* Versions up to 1.04 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:iu_developer2:*:*:*:*:*:*:*:* Versions up to 1.08 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsoft_iq_appportal:*:*:*:*:*:*:*:* Versions up to 1.17t Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:* Versions up to 2.70y Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* Versions up to 1.110q Vulnerable ·Mitsubishi Electric Europe B.V.
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:* | up to 1.156n | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* | up to 4.20w | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* | up to 1.70y | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78g4_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78g8_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78g8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78g16_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78g16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78g32_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78g32:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78g64_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78g64:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78ghv_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78ghv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:rd78ghw_firmware:*:*:*:*:*:*:*:* | up to 10 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rd78ghw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
- cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:* Versions up to 1.156n Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* Versions up to 4.20w Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* Versions up to 1.70y Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78g4_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78g8_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78g8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78g16_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78g16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78g32_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78g32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78g64_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78g64:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78ghv_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78ghv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:rd78ghw_firmware:*:*:*:*:*:*:*:* Versions up to 10 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rd78ghw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-14523
- 2026-10-03 Alias added: GHSA-q9w7-f293-j9p6
References
More Mitsubishi Electric Corporation vulnerabilities
- TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
- TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
- TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
- TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
- TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
- TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
Sources
- CVE-2020-14523 · CVE Program
- CVE-2020-14523 · NVD
- FIRST EPSS
- GHSA-q9w7-f293-j9p6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences