CVE-2020-14496
Estado: ModificadaCrítica (9.8)—
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.85%
- Percentil entre todas las CVEs puntuadas: 57
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (29)
Mitsubishielectric — CPU Module Logging Configuration ToolMitsubishielectric — CW ConfiguratorMitsubishielectric — Data TransferMitsubishielectric — EM ConfiguratorMitsubishielectric — EzsocketMitsubishielectric — FR Configurator2Mitsubishielectric — GT Designer3Mitsubishielectric — GT Softgot1000Mitsubishielectric — GT Softgot2000Mitsubishielectric — GX LogviewerMitsubishielectric — GX Works2Mitsubishielectric — GX Works3Mitsubishielectric — M Commdtm-hartMitsubishielectric — M Commdtm-io-linkMitsubishielectric — Melfa-worksMitsubishielectric — Melsoft FielddeviceconfiguratorMitsubishielectric — Melsoft NavigatorMitsubishielectric — Mh11 Settingtool Version2Mitsubishielectric — MotorizerMitsubishielectric — MR Configurator2Mitsubishielectric — MT Works2Mitsubishielectric — MX ComponentMitsubishielectric — Network Interface Board Cc-link Ver.2 UtilityMitsubishielectric — Network Interface Board CC IE Control UtilityMitsubishielectric — Network Interface Board CC IE Field UtilityMitsubishielectric — Network Interface Board Mneth UtilityMitsubishielectric — PX DeveloperMitsubishielectric — RT Toolbox2Mitsubishielectric — RT Toolbox3
CWE
- CWE-275
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-14496",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2020-14496",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-04-16T17:29:04.161678Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.3,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 1.6
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "Mitsubishi Electric",
"product": "CPU Module Logging Configuration Tool",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.100E"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "CW Configurator",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.010L"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Data Transfer",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "3.40S"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "EZSocket",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "4.5"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "FR Configurator2",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.22Y"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GT Designer3 Version1 (GOT2000)",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.235V"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GT SoftGOT1000 Version3",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "3.200J"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GT SoftGOT1000 Version3",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GT SoftGOT2000 Version1",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.235V"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GX LogViewer",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.100E"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GX Works2",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.592S"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "GX Works3",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.063R"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "M_CommDTM-HART",
"versions": [
{
"status": "affected",
"version": "All 1.00A"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "M_CommDTM-IO-Link",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MELFA-Works",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "4.3"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MELSEC WinCPU Setting Utility",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MELSOFT EM Software Development Kit (EM Configurator)",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.010L"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MELSOFT FieldDeviceConfigurator",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.03D"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MELSOFT Navigator",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "2.62Q"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MH11 SettingTool Version2",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "2.002C"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MI Configurator",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Motorizer",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.005F"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MR Configurator2",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.105K"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MT Works2",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.156N"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "MX Component",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "4.19V"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Network Interface Board CC IE Control utility",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Network Interface Board CC IE Field Utility",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Network Interface Board CC-Link Ver.2 Utility",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Network Interface Board MNETH utility",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "PX Developer",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.52E"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "RT ToolBox2",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "3.72A"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "RT ToolBox3",
"versions": [
{
"status": "affected",
"version": "All",
"versionType": "custom",
"lessThanOrEqual": "1.70Y"
}
]
},
{
"vendor": "Mitsubishi Electric",
"product": "Setting/monitoring tools for the C Controller module",
"versions": [
{
"status": "affected",
"version": "All"
}
]
}
]
}
],
"published": "2022-05-19T18:15:08.360",
"references": [
{
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-275"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed."
},
{
"lang": "es",
"value": "Una explotación con éxito de esta vulnerabilidad para múltiples Productos Mitsubishi Electric Factory Automation Engineering Software de varias versiones podría permitir a un atacante escalar privilegios y ejecutar programas maliciosos, lo que podría causar una condición de denegación de servicio, y permitir que la información sea divulgada, manipulada y/o destruida"
}
],
"lastModified": "2026-06-17T02:54:52.087",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69A02BE6-633A-4A94-890C-586B3A42E19F",
"versionEndExcluding": "1.106k"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60875630-C0F2-434E-8D11-51B44F62CBA5",
"versionEndExcluding": "1.011m"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE83331F-B795-410A-8510-351945025444",
"versionEndExcluding": "3.41t"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:em_configurator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A01F0C-0B10-4906-9389-4D53AE3CD7FD",
"versionEndExcluding": "1.015r"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9FFEA10-20FA-4B73-ACA5-AB7462820123",
"versionEndExcluding": "4.6"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2877EB49-8A69-426B-B7EB-87DEF3975562",
"versionEndExcluding": "1.23z"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_designer3:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3393020-A6E6-431A-B572-E28948F6A970",
"versionEndExcluding": "1.236w"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DC963D1-281A-48DE-B822-5254643C98E7",
"versionEndExcluding": "3.245f"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20E2D739-F982-4ED4-ADFB-505777CF9888",
"versionEndExcluding": "1.236w"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0809A627-EEC8-475E-997F-E3FAE2C39261",
"versionEndExcluding": "1.106k"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F2B0AC1-1BEC-4D79-9995-527E3A770A66",
"versionEndExcluding": "1.595v"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80BF474D-E018-4612-93FD-F3A661C13A6D",
"versionEndExcluding": "1.065t"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:m_commdtm-hart:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C9ECB87-B07E-4E52-BF3F-8AD4AA03826B",
"versionEndExcluding": "1.01b"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50FA8FAD-3DF4-453C-A55C-5F622DD76460",
"versionEndExcluding": "1.04e"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED888C84-4CD8-464A-A3A0-F623EB0F4920",
"versionEndExcluding": "4.4"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:melsoft_fielddeviceconfigurator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE1E2976-38B4-4B1B-AC01-B3D8C26A1BB2",
"versionEndExcluding": "1.04e"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01D32795-831A-43D6-9F90-82A67F5E9081",
"versionEndExcluding": "2.70y"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mh11_settingtool_version2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A6DE218-D030-4DDF-B504-B176DFE7662A",
"versionEndExcluding": "2.003d"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:motorizer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FD24F8E-869B-413A-9BF1-555CF827F3C9",
"versionEndExcluding": "1.010l"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "470498DC-4A30-4EC2-B9C7-B5348D2F1381",
"versionEndExcluding": "1.106l"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7926DBE1-335C-40E2-AD74-AE89DC9A0095",
"versionEndExcluding": "1.160s"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCBBBA97-3C41-423F-8534-098070E49A97",
"versionEndExcluding": "4.20w"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:network_interface_board_cc-link_ver.2_utility:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CFA2E01-1D66-40D6-8575-0E216376CC25",
"versionEndExcluding": "1.24a"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_control_utility:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBC15323-7468-4688-A9C2-01208B4849A4",
"versionEndExcluding": "1.30g"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_field_utility:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F605A144-5A10-44C9-94DC-3B0D66E39431",
"versionEndExcluding": "1.17t"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:network_interface_board_mneth_utility:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54DBB417-5543-4AEB-9467-6197868C8C18",
"versionEndExcluding": "35m"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9987641F-1BD4-445A-86E4-778CFFFFEBD2",
"versionEndExcluding": "1.53f"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A11F999D-CE97-49B6-9AF3-DD32D0E0779F",
"versionEndExcluding": "3.73b"
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B03CE992-45F6-48EA-BE86-0041F0CDBEF7",
"versionEndExcluding": "1.80j"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}