Description
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | C Controller Interface Module Utility | unspecified – ≤ Version 2.00 | — |
| Mitsubishi Electric | CC-Link IE Control Network Data Collector | Version 1.00A | — |
| Mitsubishi Electric | CC-Link IE Field Network Data Collector | Version 1.00A | — |
| Mitsubishi Electric | CC-Link IE TSN Data Collector | Version 1.00A | — |
| Mitsubishi Electric | CPU Module Logging Configuration Tool | unspecified – ≤ Version 1.100E | — |
| Mitsubishi Electric | CW Configurator | unspecified – ≤ Version 1.010L | — |
| Mitsubishi Electric | Data Transfer | unspecified – ≤ Version 3.42U | — |
| Mitsubishi Electric | EZSocket | unspecified – ≤ Version 5.1 | — |
| Mitsubishi Electric | FR Configurator SW3 | All Versions | — |
| Mitsubishi Electric | FR Configurator2 | unspecified – ≤ Version 1.26C | — |
| Mitsubishi Electric | GT Designer2 Classic | All Versions | — |
| Mitsubishi Electric | GT Designer3 Version1 (GOT1000) | unspecified – ≤ Version 1.241B | — |
| Mitsubishi Electric | GT Designer3 Version1 (GOT2000) | unspecified – ≤ Version 1.241B | — |
| Mitsubishi Electric | GT SoftGOT1000 Version3 | unspecified – ≤ Version 3.200J | — |
| Mitsubishi Electric | GT SoftGOT2000 Version1 | unspecified – ≤ Version 1.241B | — |
| Mitsubishi Electric | GX Developer | unspecified – ≤ Version 8.504A | — |
| Mitsubishi Electric | GX LogViewer | unspecified – ≤ Version 1.100E | — |
| Mitsubishi Electric | GX Works2 | unspecified – ≤ Version 1.601B | — |
| Mitsubishi Electric | GX Works3 | unspecified – ≤ Version 1.063R | — |
| Mitsubishi Electric | M_CommDTM-IO-Link | unspecified – ≤ Version 1.03D | — |
| Mitsubishi Electric | MELFA-Works | unspecified – ≤ Version 4.4 | — |
| Mitsubishi Electric | MELSEC WinCPU Setting Utility | All Versions | — |
| Mitsubishi Electric | MELSOFT Complete Clean Up Tool | unspecified – ≤ Version 1.06G | — |
| Mitsubishi Electric | MELSOFT EM Software Development Kit | unspecified – ≤ Version 1.015R | — |
| Mitsubishi Electric | MELSOFT iQ AppPortal | unspecified – ≤ Version 1.17T | — |
| Mitsubishi Electric | MELSOFT Navigator | unspecified – ≤ Version 2.74C | — |
| Mitsubishi Electric | MI Configurator | unspecified – ≤ Version 1.004E | — |
| Mitsubishi Electric | Motion Control Setting | unspecified – ≤ Version 1.005F | — |
| Mitsubishi Electric | Motorizer | unspecified – ≤ Version 1.005F | — |
| Mitsubishi Electric | MR Configurator2 | unspecified – ≤ Version 1.125F | — |
| Mitsubishi Electric | MT Works2 | unspecified – ≤ Version 1.167Z | — |
| Mitsubishi Electric | MTConnect Data Collector | unspecified – ≤ Version 1.1.4.0 | — |
| Mitsubishi Electric | MX Component | unspecified – ≤ Version 4.20W | — |
| Mitsubishi Electric | MX MESInterface | unspecified – ≤ Version 1.21X | — |
| Mitsubishi Electric | MX MESInterface-R | unspecified – ≤ Version 1.12N | — |
| Mitsubishi Electric | MX Sheet | unspecified – ≤ Version 2.15R | — |
| Mitsubishi Electric | Network Interface Board CC IE Control Utility | unspecified – ≤ Version 1.29F | — |
| Mitsubishi Electric | Network Interface Board CC IE Field Utility | unspecified – ≤ Versions 1.16S | — |
| Mitsubishi Electric | Network Interface Board CC-Link Ver.2 Utility | unspecified – ≤ Version 1.23Z | — |
| Mitsubishi Electric | Network Interface Board MNETH Utility | unspecified – ≤ Version 34L | — |
| Mitsubishi Electric | Position Board utility 2 | unspecified – ≤ Version 3.20 | — |
| Mitsubishi Electric | PX Developer | unspecified – ≤ Version 1.53F | — |
| Mitsubishi Electric | RT ToolBox2 | unspecified – ≤ Version 3.73B | — |
| Mitsubishi Electric | RT ToolBox3 | unspecified – ≤ Version 1.82L | — |
| Mitsubishi Electric | Setting/Monitoring tools for the C Controller module | unspecified – ≤ SW3PVC-CCPU Version 3.13P, unspecified – ≤ SW4PVC-CCPU Version 4.12N | — |
| Mitsubishi Electric | SLMP Data Collector | unspecified – ≤ Version 1.04E | — |
Advisories 1
- ICSA-20-212-04 Mitsubishi Electric Factory Automation Engineering Products (Update L) CISA ICS & IT advisories · May 28, 2026
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-04 government-resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-007_en.pdf vendor-advisory