CVE-2020-14521

Name: CVE-2020-14521
Creator: NVD / NIST
Published: 2022-02-11T18:15:08.513+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.8/10EPSS 1.22%

Last modified Jun 17, 2026

CVE-2020-14521 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.

Description

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

Metrics

CVSS 3.1

9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

1.22%

64.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Mitsubishielectric	C Controller Interface Module Utility	All versions
Mitsubishielectric	C Controller Module Setting And Monitoring Tool	All versions
Mitsubishielectric	Cc-Link Ie Control Network Data Collector	1.00a
Mitsubishielectric	Cc-Link Ie Field Network Data Collector	1.00a
Mitsubishielectric	Cc-Link Ie Tsn Data Collector	1.00a
Mitsubishielectric	Cpu Module Logging Configuration Tool	<= 1.100e
Mitsubishielectric	Cw Configurator	<= 1.010l
Mitsubishielectric	Data Transfer	<= 3.42u
Mitsubishielectric	Ezsocket	<= 5.1
Mitsubishielectric	Fr Configurator Sw3	All versions
Mitsubishielectric	Fr Configurator2	All versions
Mitsubishielectric	Gt Designer2 Classic	All versions
Mitsubishielectric	Gt Softgot1000	>= 3.0, <= 3.200j
Mitsubishielectric	Gt Softgot2000	>= 1.0, <= 1.241b
Mitsubishielectric	Gx Developer	<= 8.504a
Mitsubishielectric	Gx Logviewer	<= 1.100e
Mitsubishielectric	Gx Works2	<= 1.601b
Mitsubishielectric	Gx Works3	<= 1.063r
Mitsubishielectric	M Commdtm-Io-Link	All versions
Mitsubishielectric	Melfa-Works	<= 4.4
Mitsubishielectric	Melsec Wincpu Setting Utility	All versions
Mitsubishielectric	Melsoft Complete Clean Up Tool	<= 1.06g
Mitsubishielectric	Melsoft Em Software Development Kit	All versions
Mitsubishielectric	Melsoft Iq Appportal	<= 1.17t
Mitsubishielectric	Melsoft Navigator	<= 2.74c
Mitsubishielectric	Mi Configurator	All versions
Mitsubishielectric	Motion Control Setting	<= 1.005f
Mitsubishielectric	Motorizer	<= 1.005f
Mitsubishielectric	Mr Configurator2	<= 1.125f
Mitsubishielectric	Mt Works2	<= 1.167z
Mitsubishielectric	Mtconnect Data Collector	<= 1.1.4.0
Mitsubishielectric	Mx Component	<= 4.20w
Mitsubishielectric	Mx Mesinterface	<= 1.21x
Mitsubishielectric	Mx Mesinterface-R	<= 1.12n
Mitsubishielectric	Mx Sheet	<= 2.15r
Mitsubishielectric	Position Board Utility 2	All versions
Mitsubishielectric	Px Developer	<= 1.53f
Mitsubishielectric	Rt Toolbox2	<= 3.73b
Mitsubishielectric	Rt Toolbox3	<= 1.82l
Mitsubishielectric	Setting\/Monitoring Tools For The C Controller Module	All versions
Mitsubishielectric	Slmp Data Collector	<= 1.04e
Mitsubishielectric	Gt Designer3	<= 1.241b
Mitsubishielectric	Network Interface Board Cc-Link Ver.2 Utility Firmware	All versions
Mitsubishielectric	Network Interface Board Cc Ie Control Utility Firmware	All versions
Mitsubishielectric	Network Interface Board Cc Ie Field Utility Firmware	All versions
Mitsubishielectric	Network Interface Board Mneth Utility Firmware	All versions

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04Third Party Advisory, US Government Resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdfVendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04Third Party Advisory, US Government Resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdfVendor Advisory

Timeline

Published: Feb 11, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-14521?

How severe is CVE-2020-14521?

CVE-2020-14521 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.22% probability of exploitation in the next 30 days.

How do I fix CVE-2020-14521?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-14521?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST