CVE-2020-12013

CRITICAL 9.1CVE-2020-12013 · Published 16/07/2020 · updated 17/06/2026

In short

CVE-2020-12013 is a CRITICAL (CVSS 9.1) vulnerability affecting mc works32 (mitsubishielectric), mc works64 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mc works32 mitsubishielectric	`= 9.50.255.02`	No fix yet
mc works64 mitsubishielectric	`≤ 10.95.208.31`	No fix yet

Description

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server v10.96 and prior; ICONICS GenBroker32 v9.5 and prior.

References

us-cert.cisa.gov/ics/advisories/icsa-20-170-02 · Third Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-170-03 · Third Party Advisory

More vulnerabilities in mc works32

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2020-12013 is a CRITICAL (CVSS 9.1) vulnerability affecting mc works32 (mitsubishielectric), mc works64 (mitsubishielectric).

Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

mc works32

mitsubishielectric

= 9.50.255.02

No fix yet

mc works64

mitsubishielectric

≤ 10.95.208.31

No fix yet

Description

More vulnerabilities in mc works32

See all →