high7.5
CVE-2021-20601
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versio…
Impact
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Gt Softgot2000 | All versions |
| Mitsubishielectric | Got Simple Gs2110-Wtbd Firmware | All versions |
| Mitsubishielectric | Got Simple Gs2107-Wtbd Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2104-Rtbd Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2103-Pmbd Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2103-Pmbds Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2103-Pmbds2 Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2103-Pmbls Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2107-Wtbd Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2310-Vtba Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2310-Vtbd Firmware | All versions |
| Mitsubishielectric | Got2000 Gt2308-Vtbd Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/vu/JVNVU98072504
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf
- https://jvn.jp/vu/JVNVU98072504
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf