VULNERABILITY INTELLIGENCE
CVE-2020-14496
CVSS score8.3 HIGH
EPSS probability0.87%
CISA KEVNot currently listed
Published2022-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Description
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-275
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource