Description (CNA)
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mitsubishi Electric / CW Configurator | affected unspecified through Version 1.010L |
| Mitsubishi Electric / FR Configurator2 | affected unspecified through Version 1.22Y |
| Mitsubishi Electric / GX Works2 | affected unspecified through Version 1.595V |
| Mitsubishi Electric / GX Works3 | affected unspecified through Version 1.063R |
| Mitsubishi Electric / MELSOFT iQ AppPortal | affected unspecified through Version 1.17T |
| Mitsubishi Electric / MELSOFT Navigator | affected unspecified through Version2.70Y |
| Mitsubishi Electric / MI Configurator | affected All Versions |
| Mitsubishi Electric / MR Configurator2 | affected unspecified through Version 1.110Q |
| Mitsubishi Electric / MT Works2 | affected unspecified through Versions 1.156N |
| Mitsubishi Electric / MX Component | affected unspecified through Version 4.20W |
| Mitsubishi Electric / RT ToolBox3 | affected unspecified through Versions 1.70Y |
| Mitsubishi Electric / MELSEC iQ-R Series Motion Module | affected unspecified through Versions 10 |
CWE
CWE-22
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-03
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-008_en.pdf
- https://jvn.jp/vu/JVNVU90224831/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.