Advisories · Technology

Mitsubishi Electric FR Configurator2.

Every CVE that names Mitsubishi Electric FR Configurator2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-14496 CVE record

CVSS 8.3 High

Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
- Mitsubishi Electric CPU Module Logging Configuration Tool
- Mitsubishi Electric CW Configurator
- CWE-275
Not analysed yet 19 May 2022
CVE-2020-14523 CVE record

CVSS 8.3 High

Mitsubishi Electric Factory Automation Products Path Traversal
- Mitsubishi Electric CW Configurator
- Mitsubishi Electric FR Configurator2
- Path traversal
Not analysed yet 11 Feb 2022
CVE-2020-14521 CVE record

CVSS 8.3 High

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
- Mitsubishi Electric C Controller Interface Module Utility
- Mitsubishi Electric CC-Link IE Control Network Data Collector
- CWE-428
Not analysed yet 11 Feb 2022
CVE-2019-10972 CVE record

Uncontrolled resource consumption in Mitsubishi Electric FR Configurator2
- Mitsubishi Electric FR Configurator2
- Denial of service
Not analysed yet 25 Jul 2019
CVE-2019-10976 CVE record

XML external entity injection in Mitsubishi Electric FR Configurator2
- Mitsubishi Electric FR Configurator2
- XML external entities (XXE)
Not analysed yet 25 Jul 2019