CVE-2020-14496
Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
- Record
CVE-2020-14496- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-275
- Updated
- 2026-11-02
EUVDEUVD-2020-6632
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
- Record
EUVD-2020-6632- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-j3qh-9fj7-j65q
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation...
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
- Record
GHSA-j3qh-9fj7-j65q- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
- Record
CVE-2020-14496- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-275
- Updated
- 2026-11-02
Affected products
- mitsubishi electric cpu module logging configuration tool
- mitsubishi electric cw configurator
- mitsubishi electric data transfer
- mitsubishi electric ezsocket
- mitsubishi electric fr configurator2
- mitsubishi electric gt designer3 version1 (got2000)
- mitsubishi electric gt softgot1000 version3
- mitsubishi electric gt softgot2000 version1
- mitsubishi electric gx logviewer
- mitsubishi electric gx works2
- mitsubishi electric gx works3
- mitsubishi electric m commdtm-hart
Show 77 moreShow less
- mitsubishi electric m commdtm-io-link
- mitsubishi electric melfa-works
- mitsubishi electric melsec wincpu setting utility
- mitsubishi electric melsoft em software development kit (em configurator)
- mitsubishi electric melsoft fielddeviceconfigurator
- mitsubishi electric melsoft navigator
- mitsubishi electric mh11 settingtool version2
- mitsubishi electric mi configurator
- mitsubishi electric motorizer
- mitsubishi electric mr configurator2
- mitsubishi electric mt works2
- mitsubishi electric mx component
- mitsubishi electric network interface board cc ie control utility
- mitsubishi electric network interface board cc ie field utility
- mitsubishi electric network interface board cc-link ver.2 utility
- mitsubishi electric network interface board mneth utility
- mitsubishi electric px developer
- mitsubishi electric rt toolbox2
- mitsubishi electric rt toolbox3
- mitsubishi electric setting/monitoring tools for the c controller module
- mitsubishi electric corporation cpu module logging configuration tool
- mitsubishi electric corporation cw configurator
- mitsubishi electric corporation data transfer
- mitsubishi electric corporation ezsocket
- mitsubishi electric corporation fr configurator2
- mitsubishi electric corporation gt designer3 version1 (got2000)
- mitsubishi electric corporation gt softgot1000 version3
- mitsubishi electric corporation gt softgot2000 version1
- mitsubishi electric corporation gx logviewer
- mitsubishi electric corporation gx works2
- mitsubishi electric corporation gx works3
- mitsubishi electric corporation m commdtm-hart
- mitsubishi electric corporation m commdtm-io-link
- mitsubishi electric corporation melfa-works
- mitsubishi electric corporation melsec wincpu setting utility
- mitsubishi electric corporation melsoft em software development kit (em configurator)
- mitsubishi electric corporation melsoft navigator
- mitsubishi electric corporation mh11 settingtool version2
- mitsubishi electric corporation mi configurator
- mitsubishi electric corporation mt works2
- mitsubishi electric corporation mx component
- mitsubishi electric corporation network interface board cc ie control utility
- mitsubishi electric corporation network interface board cc ie field utility
- mitsubishi electric corporation network interface board cc-link ver.2 utility
- mitsubishi electric corporation network interface board mneth utility
- mitsubishi electric corporation px developer
- mitsubishi electric corporation rt toolbox2
- mitsubishi electric corporation rt toolbox3
- mitsubishielectric cpu module logging configuration tool
- mitsubishielectric cw configurator
- mitsubishielectric data transfer
- mitsubishielectric em configurator
- mitsubishielectric ezsocket
- mitsubishielectric fr configurator2
- mitsubishielectric gt designer3
- mitsubishielectric gt softgot1000
- mitsubishielectric gt softgot2000
- mitsubishielectric gx logviewer
- mitsubishielectric gx works2
- mitsubishielectric gx works3
- mitsubishielectric m commdtm-hart
- mitsubishielectric m commdtm-io-link
- mitsubishielectric melfa-works
- mitsubishielectric melsoft fielddeviceconfigurator
- mitsubishielectric melsoft navigator
- mitsubishielectric mh11 settingtool version2
- mitsubishielectric motorizer
- mitsubishielectric mr configurator2
- mitsubishielectric mt works2
- mitsubishielectric mx component
- mitsubishielectric network interface board cc-link ver.2 utility
- mitsubishielectric network interface board cc ie control utility
- mitsubishielectric network interface board cc ie field utility
- mitsubishielectric network interface board mneth utility
- mitsubishielectric px developer
- mitsubishielectric rt toolbox2
- mitsubishielectric rt toolbox3
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-14496 is a high vulnerability (CVSS 8.3) in Mitsubishi Electric Cpu Module Logging Configuration Tool, published May 19, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 58th percentile. No source names a fixed version.