CVE-2020-14521
Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
- Record
CVE-2020-14521- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-428
- Updated
- 2026-11-02
EUVDEUVD-2020-6657
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
- Record
EUVD-2020-6657- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7hfr-xh2r-6vj8
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious...
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
- Record
GHSA-7hfr-xh2r-6vj8- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-276, CWE-428
- Updated
- 2026-11-02
NVD
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
- Record
CVE-2020-14521- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-428, CWE-276
- Updated
- 2026-11-02
Affected products
- mitsubishi electric c controller interface module utility
- mitsubishi electric cc-link ie control network data collector
- mitsubishi electric cc-link ie field network data collector
- mitsubishi electric cc-link ie tsn data collector
- mitsubishi electric cpu module logging configuration tool
- mitsubishi electric cw configurator
- mitsubishi electric data transfer
- mitsubishi electric ezsocket
- mitsubishi electric fr configurator sw3
- mitsubishi electric fr configurator2
- mitsubishi electric gt designer2 classic
- mitsubishi electric gt designer3 version1 (got1000)
Show 109 moreShow less
- mitsubishi electric gt designer3 version1 (got2000)
- mitsubishi electric gt softgot1000 version3
- mitsubishi electric gt softgot2000 version1
- mitsubishi electric gx developer
- mitsubishi electric gx logviewer
- mitsubishi electric gx works2
- mitsubishi electric gx works3
- mitsubishi electric m commdtm-io-link
- mitsubishi electric melfa-works
- mitsubishi electric melsec wincpu setting utility
- mitsubishi electric melsoft complete clean up tool
- mitsubishi electric melsoft em software development kit
- mitsubishi electric melsoft iq appportal
- mitsubishi electric melsoft navigator
- mitsubishi electric mi configurator
- mitsubishi electric motion control setting
- mitsubishi electric motorizer
- mitsubishi electric mr configurator2
- mitsubishi electric mt works2
- mitsubishi electric mtconnect data collector
- mitsubishi electric mx component
- mitsubishi electric mx mesinterface
- mitsubishi electric mx mesinterface-r
- mitsubishi electric mx sheet
- mitsubishi electric network interface board cc ie control utility
- mitsubishi electric network interface board cc ie field utility
- mitsubishi electric network interface board cc-link ver.2 utility
- mitsubishi electric network interface board mneth utility
- mitsubishi electric position board utility 2
- mitsubishi electric px developer
- mitsubishi electric rt toolbox2
- mitsubishi electric rt toolbox3
- mitsubishi electric setting/monitoring tools for the c controller module
- mitsubishi electric slmp data collector
- mitsubishi electric corporation cpu module logging configuration tool
- mitsubishi electric corporation cw configurator
- mitsubishi electric corporation data transfer
- mitsubishi electric corporation ezsocket
- mitsubishi electric corporation fr configurator sw3
- mitsubishi electric corporation fr configurator2
- mitsubishi electric corporation gt designer3 version1 (got1000)
- mitsubishi electric corporation gt designer3 version1 (got2000)
- mitsubishi electric corporation gt softgot1000 version3
- mitsubishi electric corporation gt softgot2000 version1
- mitsubishi electric corporation gx developer
- mitsubishi electric corporation gx logviewer
- mitsubishi electric corporation gx works2
- mitsubishi electric corporation gx works3
- mitsubishi electric corporation m commdtm-io-link
- mitsubishi electric corporation melfa-works
- mitsubishi electric corporation melsec wincpu setting utility
- mitsubishi electric corporation melsoft navigator
- mitsubishi electric corporation mi configurator
- mitsubishi electric corporation mt works2
- mitsubishi electric corporation mx component
- mitsubishi electric corporation network interface board cc ie control utility
- mitsubishi electric corporation network interface board cc ie field utility
- mitsubishi electric corporation network interface board cc-link ver.2 utility
- mitsubishi electric corporation network interface board mneth utility
- mitsubishi electric corporation px developer
- mitsubishi electric corporation rt toolbox2
- mitsubishi electric corporation rt toolbox3
- mitsubishi electric corporation slmp data collector
- mitsubishielectric c controller interface module utility
- mitsubishielectric c controller module setting and monitoring tool
- mitsubishielectric cc-link ie control network data collector
- mitsubishielectric cc-link ie field network data collector
- mitsubishielectric cc-link ie tsn data collector
- mitsubishielectric cpu module logging configuration tool
- mitsubishielectric cw configurator
- mitsubishielectric data transfer
- mitsubishielectric ezsocket
- mitsubishielectric fr configurator2
- mitsubishielectric fr configurator sw3
- mitsubishielectric gt designer2 classic
- mitsubishielectric gt designer3
- mitsubishielectric gt softgot1000
- mitsubishielectric gt softgot2000
- mitsubishielectric gx developer
- mitsubishielectric gx logviewer
- mitsubishielectric gx works2
- mitsubishielectric gx works3
- mitsubishielectric m commdtm-io-link
- mitsubishielectric melfa-works
- mitsubishielectric melsec wincpu setting utility
- mitsubishielectric melsoft complete clean up tool
- mitsubishielectric melsoft em software development kit
- mitsubishielectric melsoft iq appportal
- mitsubishielectric melsoft navigator
- mitsubishielectric mi configurator
- mitsubishielectric motion control setting
- mitsubishielectric motorizer
- mitsubishielectric mr configurator2
- mitsubishielectric mt works2
- mitsubishielectric mtconnect data collector
- mitsubishielectric mx component
- mitsubishielectric mx mesinterface
- mitsubishielectric mx mesinterface-r
- mitsubishielectric mx sheet
- mitsubishielectric network interface board cc-link ver.2 utility firmware
- mitsubishielectric network interface board cc ie control utility firmware
- mitsubishielectric network interface board cc ie field utility firmware
- mitsubishielectric network interface board mneth utility firmware
- mitsubishielectric position board utility 2
- mitsubishielectric px developer
- mitsubishielectric rt toolbox2
- mitsubishielectric rt toolbox3
- mitsubishielectric setting\/monitoring tools for the c controller module
- mitsubishielectric slmp data collector
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-14521 is a high vulnerability (CVSS 8.3) in Mitsubishi Electric C Controller Interface Module Utility, published February 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.30%, the 70th percentile. No source names a fixed version.