Permissions, Privileges, and Access Controls in Mitsubishi Electric products - CVE-2020-14496

Vulnerability identifier: #VU32955

CSH Severity: Medium

CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-14496

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.

MT Works2
M_CommDTM-IO-Link
MELFA-Works
CPU Module Logging Configuration Tool
MELSOFT FieldDeviceConfigurator
MELSOFT Navigator
MI Configurator
MR Configurator2
RT ToolBox2
RT ToolBox3
GT Designer3
Mitsubishi Electric FR Configurator2
GX Works3
M_CommDTM-HART
GX Works2
CW Configurator
GX LogViewer
MELSEC WinCPU Setting Utility
MH11 SettingTool Version2
Setting/monitoring tools for the C Controller module
EZSocket
Data Transfer
Motorizer
PX Developer
MELSOFT EM Software Development Kit
MX Component
Network Interface Board CC IE Control utility
Network Interface Board CC IE Field Utility
Network Interface Board CC-Link Ver.2 Utility
Network Interface Board MNETH utility
GT SoftGOT1000 Version3
GT SoftGOT2000 Version1

Install updates from vendor's website.

MT Works2 - update to 1.160S
MELFA-Works - update to 4.4
CPU Module Logging Configuration Tool - update to 1.106K
MELSOFT FieldDeviceConfigurator - update to 1.04E
MELSOFT Navigator - update to 2.70Y
MH11 SettingTool Version2 - update to 2.003D
Motorizer - update to 1.010L
MR Configurator2 - update to 1.106L
MELSOFT EM Software Development Kit - update to 1.015R
MX Component - update to 4.20W
PX Developer - update to 1.53F
RT ToolBox2 - update to 3.73 B
RT ToolBox3 - update to 1.80J
GT Designer3 - update to 1.236W
Mitsubishi Electric FR Configurator2 - update to 1.23Z
GX Works3 - update to 1.065T
M_CommDTM-HART - update to 1.01 B
EZSocket - update to 4.6
GX Works2 - update to 1.595V
CW Configurator - update to 1.011M
GX LogViewer - update to 1.106K
Data Transfer - update to 3.41T

• https://ics-cert.us-cert.gov/advisories/icsa-20-212-02

• Privilege escalation in Mitsubishi Electric Multiple Factory Automation Engineering Software Products