Vulnerability · Published May 19, 2022 · Assigned by icscert
CVE-2020-14496Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
High 8.3
In plain English
A high-severity security flaw in CPU Module Logging Configuration Tool from Mitsubishi Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Official description
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Affected products (as reported)
Weakness: CWE-275 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02 x_refsource_MISC