Description
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | CW Configurator | unspecified – ≤ Version 1.010L | — |
| Mitsubishi Electric | FR Configurator2 | unspecified – ≤ Version 1.22Y | — |
| Mitsubishi Electric | GX Works2 | unspecified – ≤ Version 1.595V | — |
| Mitsubishi Electric | GX Works3 | unspecified – ≤ Version 1.063R | — |
| Mitsubishi Electric | MELSOFT iQ AppPortal | unspecified – ≤ Version 1.17T | — |
| Mitsubishi Electric | MELSOFT Navigator | unspecified – ≤ Version2.70Y | — |
| Mitsubishi Electric | MI Configurator | All Versions | — |
| Mitsubishi Electric | MR Configurator2 | unspecified – ≤ Version 1.110Q | — |
| Mitsubishi Electric | MT Works2 | unspecified – ≤ Versions 1.156N | — |
| Mitsubishi Electric | MX Component | unspecified – ≤ Version 4.20W | — |
| Mitsubishi Electric | RT ToolBox3 | unspecified – ≤ Versions 1.70Y | — |
| Mitsubishi Electric | MELSEC iQ-R Series Motion Module | unspecified – ≤ Versions 10 | — |
Advisories 1
- ICSA-20-212-03 Mitsubishi Electric Factory Automation Products Path Traversal (Update C) CISA ICS & IT advisories · May 27, 2021