U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2020-14521

Change History

Initial Analysis by NIST 2/22/2022 1:14:54 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:mitsubishielectric:c_controller_interface_module_utility:*:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:c_controller_interface_module_utility:*:*:*:*:*:*:*:* versions up to (including) 1.04e
     *cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:cc-link_ie_control_network_data_collector:1.00a:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:cc-link_ie_field_network_data_collector:1.00a:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:cc-link_ie_tsn_data_collector:1.00a:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:* versions up to (including) 1.100e
     *cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* versions up to (including) 1.010l
     *cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:* versions up to (including) 3.42u
     *cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:* versions up to (including) 5.1
     *cpe:2.3:a:mitsubishielectric:fr_configurator2:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:got1000:*:*:*:*:*:*:*:* versions up to (including) 1.241b
     *cpe:2.3:a:mitsubishielectric:got2000:*:*:*:*:*:*:*:* versions up to (including) 1.241b
     *cpe:2.3:a:mitsubishielectric:gt_designer2_classic:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:* versions from (including) 3.0 up to (including) 3.200j
     *cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:* versions from (including) 1.0 up to (including) 1.241b
     *cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:* versions up to (including) 8.504a
     *cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:* versions up to (including) 1.100e
     *cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* versions up to (including) 1.601b
     *cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* versions up to (including) 1.063r
     *cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:* versions up to (including) 4.4
     *cpe:2.3:a:mitsubishielectric:melsec_wincpu_setting_utility:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:melsoft_complete_clean_up_tool:*:*:*:*:*:*:*:* versions up to (including) 1.06g
     *cpe:2.3:a:mitsubishielectric:melsoft_em_software_development_kit:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:melsoft_iq_appportal:*:*:*:*:*:*:*:* versions up to (including) 1.17t
     *cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:* versions up to (including) 2.74c
     *cpe:2.3:a:mitsubishielectric:mi_configurator:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:motion_control_setting:*:*:*:*:*:*:*:* versions up to (including) 1.005f
     *cpe:2.3:a:mitsubishielectric:motorizer:*:*:*:*:*:*:*:* versions up to (including) 1.005f
     *cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* versions up to (including) 1.125f
     *cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:* versions up to (including) 1.167z
     *cpe:2.3:a:mitsubishielectric:mtconnect_data_collector:*:*:*:*:*:*:*:* versions up to (including) 1.1.4.0
     *cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* versions up to (including) 4.20w
     *cpe:2.3:a:mitsubishielectric:mx_mesinterface:*:*:*:*:*:*:*:* versions up to (including) 1.21x
     *cpe:2.3:a:mitsubishielectric:mx_mesinterface-r:*:*:*:*:*:*:*:* versions up to (including) 1.12n
     *cpe:2.3:a:mitsubishielectric:mx_sheet:*:*:*:*:*:*:*:* versions up to (including) 2.15r
     *cpe:2.3:a:mitsubishielectric:network_interface_board_cc-link_ver.2_utility:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_control_utility:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_field_utility:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:network_interface_board_mneth_utility:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:position_board_utility_2:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:* versions up to (including) 1.53f
     *cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:* versions up to (including) 3.73b
     *cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* versions up to (including) 1.82l
     *cpe:2.3:a:mitsubishielectric:setting\/monitoring_tools_for_the_c_controller_module:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mitsubishielectric:slmp_data_collector:-:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
NIST CWE-276
Changed Reference Type
https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 No Types Assigned
https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 Third Party Advisory, US Government Resource
Changed Reference Type
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf No Types Assigned
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf Vendor Advisory