title: Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
description:
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
problem types: CWE-428 Unquoted Search Path or Element
affected:
{
defaultStatus: unaffected
product: C Controller Interface Module Utility
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 2.00, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: CC-Link IE Control Network Data Collector
vendor: Mitsubishi Electric
versions:
status: affected, version: Version 1.00A
}
{
defaultStatus: unaffected
product: CC-Link IE Field Network Data Collector
vendor: Mitsubishi Electric
versions:
status: affected, version: Version 1.00A
}
{
defaultStatus: unaffected
product: CC-Link IE TSN Data Collector
vendor: Mitsubishi Electric
versions:
status: affected, version: Version 1.00A
}
{
defaultStatus: unaffected
product: CPU Module Logging Configuration Tool
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.100E, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: CW Configurator
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.010L, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Data Transfer
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 3.42U, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: EZSocket
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 5.1, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: FR Configurator SW3
vendor: Mitsubishi Electric
versions:
status: affected, version: All Versions
}
{
defaultStatus: unaffected
product: FR Configurator2
vendor: Mitsubishi Electric
versions:
lessThanOrEqual:  Version 1.26C, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GT Designer2 Classic
vendor: Mitsubishi Electric
versions:
status: affected, version: All Versions
}
{
defaultStatus: unaffected
product: GT Designer3 Version1 (GOT1000)
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.241B, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GT Designer3 Version1 (GOT2000)
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.241B, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GT SoftGOT1000 Version3
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 3.200J, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GT SoftGOT2000 Version1
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.241B, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GX Developer
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 8.504A, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GX LogViewer
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.100E, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GX Works2
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.601B, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: GX Works3
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.063R, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: M_CommDTM-IO-Link
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.03D, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MELFA-Works
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 4.4, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MELSEC WinCPU Setting Utility
vendor: Mitsubishi Electric
versions:
status: affected, version: All Versions
}
{
defaultStatus: unaffected
product: MELSOFT Complete Clean Up Tool
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.06G, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MELSOFT EM Software Development Kit
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.015R, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MELSOFT iQ AppPortal
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.17T, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MELSOFT Navigator
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 2.74C, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MI Configurator
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.004E, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Motion Control Setting
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.005F, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Motorizer
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.005F, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MR Configurator2
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.125F, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MT Works2
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.167Z, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MTConnect Data Collector
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.1.4.0, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MX Component
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 4.20W, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MX MESInterface
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.21X, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MX MESInterface-R
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.12N, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: MX Sheet
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 2.15R, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Network Interface Board CC IE Control Utility
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.29F, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Network Interface Board CC IE Field Utility
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Versions 1.16S, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Network Interface Board CC-Link Ver.2 Utility
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.23Z, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Network Interface Board MNETH Utility
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 34L, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Position Board utility 2
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 3.20, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: PX Developer
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.53F, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: RT ToolBox2
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 3.73B, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: RT ToolBox3
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.82L, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: Setting/Monitoring tools for the C Controller module
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: SW3PVC-CCPU Version 3.13P, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: SW4PVC-CCPU Version 4.12N, status: affected, version: unspecified, versionType: custom
}
{
defaultStatus: unaffected
product: SLMP Data Collector
vendor: Mitsubishi Electric
versions:
lessThanOrEqual: Version 1.04E, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL