CVE:CVE-2020-14523
CNNVD:CNNVD-202007-1777
Mitsubishi Electric Factory Automation是Mitsubishi Electric公司的工业自动化产品。
多款Mitsubishi Electric Factory Automation 产品存在路径遍历漏洞。攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：CW Configurator 1.010L之前版本；FR Configurator2 1.22Y之前版本；GX Works2 1.595V之前版本；GX Works3 1.063R之前版本；MELSEC iQ-R Series Motion Module；MELSOFT iQ AppPortal；MELSOFT Navigator；MI Configurator；MR Configurator2；MT Works2 1.156N之前版本；MX Component；RT ToolBox3 1.70Y之前版本。
solution:Upgrade mitsubishielectric cw_configurator to a higher version than 1.010l,and avoid the version (,1.010l]; Upgrade mitsubishielectric fr_configurator2 to a higher version than 1.22y,and avoid the version (,1.22y]; Upgrade mitsubishielectric gx_works2 to a higher version than 1.595v,and avoid the version (,1.595v]; Upgrade mitsubishielectric gx_works3 to a higher version than 1.063r,and avoid the version (,1.063r]; Upgrade mitsubishielectric iu_configuration_tool to a higher version than 1.04,and avoid the version (,1.04]; Upgrade mitsubishielectric iu_developer2 to a higher version than 1.08,and avoid the version (,1.08]; Upgrade mitsubishielectric melsoft_iq_appportal to a higher version than 1.17t,and avoid the version (,1.17t]; Upgrade mitsubishielectric melsoft_navigator to a higher version than 2.70y,and avoid the version (,2.70y]; Upgrade mitsubishielectric mi_configurator to a higher version than *; Upgrade mitsubishielectric mr_configurator2 to a higher version than 1.110q,and avoid the version (,1.110q]; Upgrade mitsubishielectric mt_works2 to a higher version than 1.156n,and avoid the version (,1.156n]; Upgrade mitsubishielectric mx_component to a higher version than 4.20w,and avoid the version (,4.20w]; Upgrade mitsubishielectric rt_toolbox3 to a higher version than 1.70y,and avoid the version (,1.70y]; Upgrade mitsubishielectric rd78g4_firmware to a higher version than 10,and avoid the version (,10]; Upgrade mitsubishielectric rd78g8_firmware to a higher version than 10,and avoid the version (,10]; Upgrade mitsubishielectric rd78g16_firmware to a higher version than 10,and avoid the version (,10]; Upgrade mitsubishielectric rd78g32_firmware to a higher version than 10,and avoid the version (,10]; Upgrade mitsubishielectric rd78g64_firmware to a higher version than 10,and avoid the version (,10]; Upgrade mitsubishielectric rd78ghv_firmware to a higher version than 10,and avoid the version (,10]; Upgrade mitsubishielectric rd78ghw_firmware to a higher version than 10,and avoid the version (,10]