CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-14523
Critical (9.8) in mitsubishielectric. EPSS 2.3% chance of exploitation in the next 30 days.
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Severity
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mitsubishielectric:cw_configurator
- mitsubishielectric:fr_configurator2
- mitsubishielectric:gx_works2
- mitsubishielectric:gx_works3
- mitsubishielectric:iu_configuration_tool
- mitsubishielectric:iu_developer2
- mitsubishielectric:melsoft_iq_appportal
- mitsubishielectric:melsoft_navigator
- mitsubishielectric:mi_configurator
- mitsubishielectric:mr_configurator2
- mitsubishielectric:mt_works2
- mitsubishielectric:mx_component
- mitsubishielectric:rd78g16_firmware
- mitsubishielectric:rd78g32_firmware
- mitsubishielectric:rd78g4_firmware
- mitsubishielectric:rd78g64_firmware
- mitsubishielectric:rd78g8_firmware
- mitsubishielectric:rd78ghv_firmware
- mitsubishielectric:rd78ghw_firmware
- mitsubishielectric:rt_toolbox3