Known vulnerabilities in MR Configurator2

Vendor: Mitsubishi Electric
Software: MR Configurator2
Software CPE: cpe:2.3:a:mitsubishi_electric:mr_configurator2:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MR Configurator2 MR Configurator2 is affected by 4 known vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32955 - Permissions, Privileges, and Access Controls
CVE-2020-14496		 CWE-264 Medium
No
No
 1.106L 31.07.2020 SB2020073114
#VU32954 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14523		 CWE-22 Medium
No
No
 - 31.07.2020 SB2020073115
#VU29430 - Resource exhaustion
CVE-2020-5603		 CWE-400 Medium
No
No
 1.100E 01.07.2020 SB2020070113
#VU29429 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-5602		 CWE-611 Medium
No
No
 1.100E 01.07.2020 SB2020070113