Search/CVE-2020-14496
● CVE — High

CVE-2020-14496

VendormitsubishielectricProductcpu module logging configuration tool, cw configurator, data transfer, ezsocket, fr configurator2, gt designer3, gt softgot1000, gt softgot2000, gx logviewer, gx works2, gx works3, m commdtm-hart, m commdtm-io-link, melfa-works, melsoft navigator, mr configurator2, mt works2, mx component, em configurator, melsoft fielddeviceconfigurator, mh11 settingtool version2, motorizer, network interface board cc-link ver.2 utility, network interface board cc ie control utility, network interface board cc ie field utilityDiscoveredMay 19, 2022UpdatedNov 21, 2024

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.

CVSS v3.1
8.3 HIGH
EPSS
0.87%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▼ 0.04pp
0.91% → 0.87% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionREQUIRED
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
May 19, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024