CVE-2020-14523
Mitsubishi Electric Factory Automation Products Path Traversal
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Mitsubishi Electric Factory Automation Products Path Traversal
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
- Record
CVE-2020-14523- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2020-6659
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
- Record
EUVD-2020-6659- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q9w7-f293-j9p6 No score
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an...
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
- Record
GHSA-q9w7-f293-j9p6- Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
- Record
CVE-2020-14523- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
- mitsubishi electric cw configurator
- mitsubishi electric fr configurator2
- mitsubishi electric gx works2
- mitsubishi electric gx works3
- mitsubishi electric melsec iq-r series motion module
- mitsubishi electric melsoft iq appportal
- mitsubishi electric melsoft navigator
- mitsubishi electric mi configurator
- mitsubishi electric mr configurator2
- mitsubishi electric mt works2
- mitsubishi electric mx component
- mitsubishi electric rt toolbox3
Show 29 moreShow less
- mitsubishi electric corporation cw configurator
- mitsubishi electric corporation fr configurator2
- mitsubishi electric corporation gx works2
- mitsubishi electric corporation gx works3
- mitsubishi electric corporation melsoft navigator
- mitsubishi electric corporation mi configurator
- mitsubishi electric corporation mt works2
- mitsubishi electric corporation mx component
- mitsubishi electric corporation rt toolbox3
- mitsubishielectric cw configurator
- mitsubishielectric fr configurator2
- mitsubishielectric gx works2
- mitsubishielectric gx works3
- mitsubishielectric iu configuration tool
- mitsubishielectric iu developer2
- mitsubishielectric melsoft iq appportal
- mitsubishielectric melsoft navigator
- mitsubishielectric mi configurator
- mitsubishielectric mr configurator2
- mitsubishielectric mt works2
- mitsubishielectric mx component
- mitsubishielectric rd78g16 firmware
- mitsubishielectric rd78g32 firmware
- mitsubishielectric rd78g4 firmware
- mitsubishielectric rd78g64 firmware
- mitsubishielectric rd78g8 firmware
- mitsubishielectric rd78ghv firmware
- mitsubishielectric rd78ghw firmware
- mitsubishielectric rt toolbox3
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-14523 is a high vulnerability (CVSS 8.3) in Mitsubishi Electric Cw Configurator, published February 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.25%, the 83rd percentile. No source names a fixed version.