CVE-2020-12011

CRITICAL 9.8CVE-2020-12011 · Published 16/07/2020 · updated 17/06/2026

In short

CVE-2020-12011 is a CRITICAL (CVSS 9.8) vulnerability affecting mc works (mitsubishielectric), mc works32 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 29.2%, higher than 98.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mc works mitsubishielectric	`≤ 10.95.208.31`	No fix yet
mc works32 mitsubishielectric	`= 9.50.255.02`	No fix yet

Description

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; GenBroker32 version 9.5 and prior.

References

us-cert.cisa.gov/ics/advisories/icsa-20-170-02 · Third Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-170-03 · Third Party Advisory

More vulnerabilities in mc works

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2020-12011 is a CRITICAL (CVSS 9.8) vulnerability affecting mc works (mitsubishielectric), mc works32 (mitsubishielectric).

Chance of exploitation in the next 30 days (EPSS): 29.2%, higher than 98.2% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

mc works

mitsubishielectric

≤ 10.95.208.31

No fix yet

mc works32

mitsubishielectric

= 9.50.255.02

No fix yet

Description

More vulnerabilities in mc works

See all →