CVE-2020-12009

HIGH 7.5CVE-2020-12009 · Published 16/07/2020 · updated 17/06/2026

In short

CVE-2020-12009 is a HIGH (CVSS 7.5) vulnerability affecting mc works (mitsubishielectric), mc works32 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mc works mitsubishielectric	`≤ 10.95.208.31`	No fix yet
mc works32 mitsubishielectric	`= 9.50.255.02`	No fix yet

Description

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server v10.96 and prior; ICONICS GenBroker32 v9.5 and prior.

References

us-cert.cisa.gov/ics/advisories/icsa-20-170-02 · Third Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-170-03 · Third Party Advisory

More vulnerabilities in mc works

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mc works

mitsubishielectric

≤ 10.95.208.31

No fix yet

mc works32

mitsubishielectric

= 9.50.255.02

No fix yet

Description

More vulnerabilities in mc works

See all →